CVE-2022-28055: OS Command Injection
Published May 4, 2022
·Updated
Fusionpbx v4.4 and below contains a command injection vulnerability via the download email logs function.
Affected Software
1 affected component
FusionPBX Fusionpbx<=4.4.0
Remediation
Event History
May 4, 2022
CVE Published
via MITRE·02:49 AM
Data Sourced
via MITRE·02:49 AM
Description
Frequently Asked Questions
1
What is CVE-2022-28055?
CVE-2022-28055 is a command injection vulnerability in Fusionpbx v4.4 and below through the download email logs function.
2
What is the severity of CVE-2022-28055?
CVE-2022-28055 has a severity score of 9.8, which is considered critical.
3
How does CVE-2022-28055 affect Fusionpbx?
CVE-2022-28055 affects Fusionpbx v4.4 and below through the download email logs function, allowing for command injection.
4
How can I fix CVE-2022-28055 in Fusionpbx?
To fix CVE-2022-28055 in Fusionpbx, you should update to a version higher than 4.4.0 as per the official patch.
5
Where can I find more information about CVE-2022-28055?
More information about CVE-2022-28055 can be found at the official GitHub commit: https://github.com/fusionpbx/fusionpbx/commit/4e260b170e17705c4c9ccf787be7711b63a40868