CyberRota Analysis
AI-GeneratedAn authenticated local file inclusion vulnerability exists in Sangoma Switchvox SMB Edition 8.3, allowing attackers to exploit the play_file functionality through the sound_path parameter. This flaw enables an authenticated user to bypass file path restrictions and access sensitive files outside the designated directory. Organizations using this version of Switchvox should prioritize remediation to prevent potential data exposure and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An authenticated local file inclusion vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The play_file functionality accepts user-controlled input through the sound_path parameter and fails to properly validate file paths before accessing the underlying filesystem. By supplying absolute paths, an authenticated attacker can retrieve files outside the intended directory scope.