high8.8
CVE-2023-43336
Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to contain an access control issue via a modified parameter value…
Impact
Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to contain an access control issue via a modified parameter value, e.g., changing extension=self to extension=101.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sangoma | Freepbx | before 15.0.16 from 16.0.2 before 16.0.17 before 15.0.18 from 16.0.2 before 16.0.40 |