Approved changes feed: RSS · Atom

cpe:2.3:a:sangoma:freepbx:17.0.19.17:*:*:*:*:*:*:*

part: a version: 17.0.19.17 update: *

VendorSangoma (d67f1eae-5751-5e76-a443-3846a37ebaf1)
ProductFreepbx (e9bb594c-71db-5304-9653-3ac665826160)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:freepbx/freepbx/framework purl2cpe 2026-06-01 10:12:26.976577
pkg:github/freepbx/framework purl2cpe 2026-06-01 10:12:26.976578

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-53564 vulnerable 2026-06-03 14:57:39.722120 Details available
LOW (2.2)
A vulnerability was discovered in FreePBX 17.0.19.17. It does not verify the type of uploaded (valid FreePBX module) files, allowing high-privilege administrators to insert unwanted files. NOTE: the Supplier's position is that there is no risk beyond what high-privilege administrators are intentionally allowed to do.
Published: 2024-12-02T00:00:00.000Z
Updated: 2025-01-14T16:41:16.578Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.