CVE-2022-35153 - FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/fax_send.php

CRITICAL

FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/fax_send.php

Published Aug 18, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 1.84%

FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/fax_send.php.

No remediation recorded yet.

Weaknesses (1)

CWE-116

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-38047		Advisory
https://github.com/fusionpbx/fusionpbx/commit/07679fe80dadb08ca23d0fc16c0f832348bfec78		x_refsource_MISCPatchThird Party Advisory
https://github.com/fusionpbx/fusionpbx/commit/de22a9121a091e7fedddff22329dd6149dc5ab28		x_refsource_MISCPatchThird Party Advisory