CVE-2024-58294 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbit…
High CVSS: 8.7

CVE-2024-58294

FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands. Attackers can exploit the 'generatedocs' endpoint by crafting malicious POST requests with bash command injection to establish remote shell access.
Vendor
Sangoma
Product
Freepbx
CWE
CWE-78
Yayın Tarihi
2025-12-11 22:15:50
Güncelleme
2025-12-15 17:10:56
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-78 Freepbx HIGH Sangoma 2025

Referanslar

https://www.exploit-db.com/exploits/52031 https://www.freepbx.org/ https://www.vulncheck.com/advisories/freepbx-authenticated-remote-code-execution-via-api-module https://www.youtube.com/watch?v=rqFJ0BxwlLI