VULNERABILITY INTELLIGENCE

CVE-2024-47071

CVSS score6.8 MEDIUM
EPSS probability0.51%
CISA KEVNot currently listed
Published2024-10-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

Description

OSS Endpoint Manager is an endpoint manager module for FreePBX. OSS Endpoint Manager module activation can allow authenticated web users unauthorized access to read system files with the permissions of the webserver process. This vulnerability is fixed in 14.0.4.

Weakness classification

  • security-advisories@github.com: CWE-22

Primary references