Description
An issue was discovered in FreePBX core before 3.0.122.43, 14.0.18.34, and 5.0.1beta4. By crafting a request for adding Asterisk modules, an attacker is able to store JavaScript commands in a module name.
Unscored
CVE-2018-15891
EUVD-2018-7747GHSA-f4fj-pg4q-w4qw
An issue was discovered in FreePBX core before 3.0.122.43, 14.0.18.34, and 5.0.1beta4. By crafting a request for adding Asterisk modules, a…
Published Jun 20, 2019 · Updated Aug 5, 2024 · Assigned by mitre