← All advisories

Critical severity9.8NVD Advisory· Published Aug 18, 2022· Updated Jun 17, 2026

CVE-2022-35153

CVE-2022-35153

Description

FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/fax_send.php.

Affected products

3

FusionPBX/FusionPBX2 versions
cpe:2.3:a:fusionpbx:fusionpbx:5.0.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:fusionpbx:fusionpbx:5.0.1:*:*:*:*:*:*:*
- (no CPE)range: =5.0.1
FusionPBX/FusionPBXdescription

Patches

Vulnerability mechanics

References

2

github.com/fusionpbx/fusionpbx/commit/07679fe80dadb08ca23d0fc16c0f832348bfec78nvdPatchThird Party Advisory
github.com/fusionpbx/fusionpbx/commit/de22a9121a091e7fedddff22329dd6149dc5ab28nvdPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.