FreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is installed, allows remote attackers to execute arbitrary code, as exploited in the wild in December 2021. The fixed versions are 15.0.20 and 16.0.19.
References
| Link | Resource |
|---|---|
| https://community.freepbx.org/t/0-day-freepbx-exploit/80092 | Exploit Issue Tracking Vendor Advisory |
| https://community.freepbx.org/t/security-issue-potential-rest-phone-apps-rce/80109 | Vendor Advisory |
| https://wiki.freepbx.org/display/FOP/2021-12-21+SECURITY%3A+Potential+Rest+Phone+Apps+RCE | Vendor Advisory |
| https://community.freepbx.org/t/0-day-freepbx-exploit/80092 | Exploit Issue Tracking Vendor Advisory |
| https://community.freepbx.org/t/security-issue-potential-rest-phone-apps-rce/80109 | Vendor Advisory |
| https://wiki.freepbx.org/display/FOP/2021-12-21+SECURITY%3A+Potential+Rest+Phone+Apps+RCE | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 06:32
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://community.freepbx.org/t/0-day-freepbx-exploit/80092 - Exploit, Issue Tracking, Vendor Advisory | |
| References | () https://community.freepbx.org/t/security-issue-potential-rest-phone-apps-rce/80109 - Vendor Advisory | |
| References | () https://wiki.freepbx.org/display/FOP/2021-12-21+SECURITY%3A+Potential+Rest+Phone+Apps+RCE - Vendor Advisory |
Information
Published : 2021-12-22 19:15
Updated : 2024-11-21 06:32
NVD link : CVE-2021-45461
Mitre link : CVE-2021-45461
CVE.ORG link : CVE-2021-45461
JSON object : View
Products Affected
sangoma
- restapps
- freepbx
- pbxact
CWE