CVE-2023-23327: Avantfax

Medium severity, CVSS 4.9. EPSS: 0.8% chance of exploitation in the next 30 days.

An Information Disclosure vulnerability exists in AvantFAX 3.3.7. Backups of the AvantFAX sent/received faxes, and database backups are stored using the current date as the filename and hosted on the web server without access controls.

Affected products

• Avantfax Avantfax: version 3.3.7 only

Published 2023-03-10. Last modified 2026-07-09.