CoreCVE
Back

HIGH

3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /Electron/download directory traversal

Published May 2, 2023

Description

3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /Electron/download directory traversal. Files may have credentials, full backups, call recordings, and chat logs.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published May 2, 2023
Updated Jan 30, 2025
Reserved May 2, 2023
Link CVE-2022-48482
CISA Vulnrichment
Updated Jan 30, 2025
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-48482
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-48482