Vulnerability Database

296,720

Total vulnerabilities in the database

CVE-2023-43336

Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to contain an access control issue via a modified parameter value, e.g., changing extension=self to extension=101.

Published: Nov 2, 2023
Updated: Nov 10, 2023
CVE: CVE-2023-43336
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
sangoma / freepbx	16.0.2	16.0.17
sangoma / freepbx	-	15.0.16
sangoma / freepbx	16.0.2	16.0.40
sangoma / freepbx	-	15.0.18

http://freepbx.com
http://sangoma.com
https://medium.com/@janirudransh/security-disclosure-of-vulnerability-cve-2023-23336-4429d416f826
https://medium.com/%40janirudransh/security-disclosure-of-vulnerability-cve-2023-23336-4429d416f826

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo