CyberRota Analysis
AI-GeneratedFreePBX versions prior to 16.0.10 and 17.0.5 are vulnerable due to insufficient path sanitization in the sound language upload and conversion functionality, allowing authenticated attackers to exploit this flaw for arbitrary file writes and achieve remote code execution. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized access and potential system compromise. Immediate action is recommended for those managing FreePBX deployments to ensure security against this critical vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the sound language upload and conversion functionality that allows an authenticated attacker to perform arbitrary file writes, leading directly to remote code execution (RCE). Authentication with a known username is required. The vulnerability stems from insufficient path sanitization in the file conversion process, enabling path traversal attacks that place malicious PHP files in the web server's root directory. This issue has been patched in versions 16.0.10 and 17.0.5.