High severity8.3NVD Advisory· Published Mar 31, 2025· Updated Jun 17, 2026
CVE-2025-30005
CVE-2025-30005
Description
Xorcom CompletePBX is vulnerable to a path traversal via the Diagnostics reporting module, which will allow reading of arbitrary files and additionally delete any retrieved file in place of the expected report.
This issue affects CompletePBX: all versions up to and prior to 5.2.35
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<5.2.35+ 1 more
- (no CPE)range: <5.2.35
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
2- vulncheck.com/advisories/completepbx-path-traversal-file-deletionnvdThird Party Advisory
- www.xorcom.com/new-completepbx-release-5-2-36-1/nvdRelease Notes
News mentions
0No linked articles in our index yet.