high7.2
CVE-2024-24386
An issue in VitalPBX v.3.2.4-5 allows an attacker to execute arbitrary code via a crafted payload to the /var/lib/vitalpbx/scripts folder.
Impact
An issue in VitalPBX v.3.2.4-5 allows an attacker to execute arbitrary code via a crafted payload to the /var/lib/vitalpbx/scripts folder.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vitalpbx | Vitalpbx | Versions 3.0.4, 3.0.4-2, 3.0.4-4, 3.0.6-1, 3.0.6-2, 3.0.8 |