Medium severity6.5NVD Advisory· Published Mar 31, 2025· Updated Jun 17, 2026
CVE-2025-2292
CVE-2025-2292
Description
Xorcom CompletePBX is vulnerable to an authenticated path traversal, allowing for arbitrary file reads via the Backup and Restore functionality.This issue affects CompletePBX: through 5.2.35.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:xorcom:completepbx:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:xorcom:completepbx:*:*:*:*:*:*:*:*range: <5.2.36.1
- (no CPE)range: <=5.2.35
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
2- vulncheck.com/advisories/completepbx-file-disclosurenvdThird Party Advisory
- www.xorcom.com/new-completepbx-release-5-2-36-1/nvdRelease Notes
News mentions
0No linked articles in our index yet.