CVE-2024-47071

—

CVSS 3.1

6.8 medium

EPSS

<1%p42

Published

Oct 1, 2024 (Oct 1, 2024)

Modified

Jun 17, 2026

Description

OSS Endpoint Manager is an endpoint manager module for FreePBX. OSS Endpoint Manager module activation can allow authenticated web users unauthorized access to read system files with the permissions of the webserver process. This vulnerability is fixed in 14.0.4.

Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.