CVE-2023-43336

PoC —

CVSS 3.1

8.8 high

EPSS

<1%p52

Published

Nov 2, 2023 (Nov 2, 2023)

Modified

Jul 9, 2026

Description

Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to contain an access control issue via a modified parameter value, e.g., changing extension=self to extension=101.

Vendors: sangoma
Products: freepbx
Weakness: CWE-284
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.