CVE-2023-43336 | BDVDB-2026-215906 Detail

Description#

Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to contain an access control issue via a modified parameter value, e.g., changing extension=self to extension=101.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-284 Improper Access Control

References#

https://medium.com/@janirudransh/security-disclosure-of-vulnerability-cve-2023-23336-4429d416f826
https://medium.com/%40janirudransh/security-disclosure-of-vulnerability-cve-2023-23336-4429d416f826

Exploit#

No public exploit known

History#

Version 12023-11-02Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.