Ben Ford

1 exploit Active since Dec 2023
CVE-2023-49294 WRITEUP MEDIUM WRITEUP
Asterisk <18.20.1, <20.5.1, <21.0.1 - Info Disclosure
Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, it is possible to read any arbitrary file even when the `live_dangerously` is not enabled. This allows arbitrary files to be read. Asterisk versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, contain a fix for this issue.
CVSS 4.9