ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    FreePBX restapps 0-day found

    News
    freepbx freepbx 15 freepbx 16 zero day restapps commercial modules
    1
    1
    545
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JaredBuschJ
      JaredBusch
      last edited by JaredBusch

      0-Day in FreePBX commercial module found last night.
      Patched now. Update if you have restapps installed.

      fwconsole ma upgrade restapps
fwconsoel reload

      https://community.freepbx.org/t/0-day-freepbx-exploit/80092

      tl;dr - Someone did not santize a form input from what I gather of the conversations.

      A lot of people are not using restapps in the first place, so it should just be removed completely.

      fwconsole ma delete restapps
fwconsole reload
      1 Reply Last reply Reply Quote 4
      • 1 / 1
      • First post
        Last post