Xorcom CompletePBX Authenticated Path Traversal Vulnerability Allowing Arbitrary File Disclosure
Vulnerability
A path traversal vulnerability has been identified in Xorcom CompletePBX versions through 5.2.35. This vulnerability allows authenticated users to read arbitrary files by exploiting the Backup and Restore functionality.
Impact
Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the server.
Remediation
Users are advised to upgrade to Xorcom CompletePBX version 5.2.36.1 or later, where this vulnerability has been patched.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.8exploitability
4.8remediation
7.7relevance
0.0threat
1.1urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.