← Database

CVE-2021-43403

MEDIUM CVSS: 6.5 Published: 2022-09-29 Modified: 2026-06-17

Description

An issue was discovered in FusionPBX before 4.5.30. The log_viewer.php Log View page allows an authenticated user to choose an arbitrary filename for download (i.e., not necessarily freeswitch.log in the intended directory).

Affected Platforms

Fusionpbx Fusionpbx

Weakness Type

NVD-CWE-noinfo

References