Read the docs

Phoniebox

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Phoniebox records in CISA KEV

No Phoniebox vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-03545 CVE-2024-3799 · GHSA-98h6-g9rg-hxmr

Shell command injection in Phoniebox

Priority MEDIUM 55

Insecure handling of POST header parameter body included in requests being sent to an instance of the open-source project Phoniebox allows an attacker to create a website, which – when visited by a user – will send malic…

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.14573 Published 2024-07-10 Fixed in 3.0 CWE-78
TI-2024-03544 CVE-2024-3798 · GHSA-954r-8vpp-vj52

Insecure handling of GET argument in Phoniebox

Priority MEDIUM 44

Insecure handling of GET header parameter file included in requests being sent to an instance of the open-source project Phoniebox allows an attacker to create a website, which – when visited by a user – will send malici…

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00477 Published 2024-07-10 Fixed in 3.0 CWE-352
Open these records in search →