Description
On 3CX 15.5.6354.2 devices, the parameter "file" in the request "/api/RecordingList/download?file=" allows full access to files on the server via path traversal.
Unscored
CVE-2018-7654
EUVD-2018-19371GHSA-9h5p-wpmp-5g3r
On 3CX 15.5.6354.2 devices, the parameter "file" in the request "/api/RecordingList/download?file=" allows full access to files on the serv…
Published Mar 4, 2018 · Updated Sep 17, 2024 · Assigned by mitre