Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-2292

Xorcom CompletePBX <= 5.2.35 Authenticated File Disclosure

Description

Xorcom CompletePBX is vulnerable to an authenticated path traversal, allowing for arbitrary file reads via the Backup and Restore functionality.This issue affects CompletePBX: through 5.2.35.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Xorcom CompletePBX

Default version status: unaffected

  • 0 to ≤ 5.2.35affected

References