CVE-2021-43403: Fusionpbx

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue was discovered in FusionPBX before 4.5.30. The log_viewer.php Log View page allows an authenticated user to choose an arbitrary filename for download (i.e., not necessarily freeswitch.log in the intended directory).

Affected products

• Fusionpbx Fusionpbx: before 4.5.30 (fixed in 4.5.30)

Published 2022-09-29. Last modified 2026-06-17.