CVE-2017-14537: Netfortris Trixbox

Medium severity, CVSS 6.5. EPSS: 39.3% chance of exploitation in the next 30 days.

trixbox 2.8.0.4 has path traversal via the xajaxargs array parameter to /maint/index.php?packages or the lang parameter to /maint/modules/home/index.php.

Affected products

Published 2018-02-16. Last modified 2026-06-17.