CVE-2019-16990: Fusionpbx

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

In FusionPBX up to v4.5.7, the file app/music_on_hold/music_on_hold.php uses an unsanitized "file" variable coming from the URL, which takes any pathname (base64 encoded) and allows a download of it.

Affected products

• Fusionpbx Fusionpbx: up to and including 4.5.7

Published 2019-10-21. Last modified 2026-06-17.