github.comConfirmation
https://github.com/FreePBX/security-reporting/security/advisories/GHSA-q3h9-fmpr-vpfw CVE-2025-62173
HIGH
Authenticated SQL Injection in Endpoint Module Rest API
Record summary
CVE-2025-62173 has a selected CVSS score of 8.6 (high).
Description
## Summary Authenticated SQL Injection Vulnerability in Endpoint Module Rest API
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Dec 4, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
restappsBrowse FreePBX / restapps | CVE List | < 16.0.41 | affected |
| >= 17.0.0, < 17.0.6 | affected |