CVE-2021-37440

Summary

NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/0xfml/poc/blob/main/NCH/Axon_2.22_LFI.md
• https://www.nch.com.au/pbx/index.html

References

• https://github.com/0xfml/poc/blob/main/NCH/Axon_2.22_LFI.md
• https://www.nch.com.au/pbx/index.html

• ←Previous
• Next→