CVE-2025-55211
FreePBX Post-Authenticated Command Injection
Résumé
FreePBX Post-Authenticated Command Injection
Description d'origine
La description telle que publiée par la source (souvent en anglais).
FreePBX is an open-source web-based graphical user interface. From 17.0.19.11 to before 17.0.21, authenticated users of the Administrator Control Panel (ACP) can run arbitrary shell commands by maliciously changing languages of the framework module. This vulnerability is fixed in 17.0.21.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov