CVE-2020-21056: Path Traversal
Published May 20, 2021
·Updated
Directory Traversal vulnerability exists in FusionPBX 4.5.7, which allows a remote malicious user to create folders via the folder variale to app\edit\foldernew.php.
Affected Software
1 affected component
FusionPBX Fusionpbx=4.5.7
Remediation
Event History
May 20, 2021
CVE Published
via MITRE·03:46 PM
Data Sourced
via MITRE·03:46 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-21056?
CVE-2020-21056 is classified as a high severity vulnerability due to its potential for directory traversal.
2
How do I fix CVE-2020-21056?
To fix CVE-2020-21056, upgrade FusionPBX to the latest version that addresses this vulnerability.
3
What are the implications of exploiting CVE-2020-21056?
Exploitation of CVE-2020-21056 allows a remote attacker to create arbitrary folders, which can lead to further attacks or exposure of sensitive data.
4
Which versions of FusionPBX are affected by CVE-2020-21056?
CVE-2020-21056 affects FusionPBX version 4.5.7.
5
Is CVE-2020-21056 related to remote code execution?
CVE-2020-21056 is not a remote code execution vulnerability, but it can be used to manipulate the file system.