CVE-2022-28055 - Fusionpbx v4.4 and below contains a command injection vulnerability via the download email logs function

CRITICAL

Fusionpbx v4.4 and below contains a command injection vulnerability via the download email logs function

Published May 4, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 1.51%

Fusionpbx v4.4 and below contains a command injection vulnerability via the download email logs function.

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-32541		Advisory
https://github.com/fusionpbx/fusionpbx/commit/4e260b170e17705c4c9ccf787be7711b63a40868		x_refsource_MISCPatchThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published May 4, 2022

Updated Aug 3, 2024

Reserved Mar 28, 2022

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published May 4, 2022

Updated Aug 3, 2024

Exploited since n/a