CVE-2025-2292

Publication date

2025-03-31 16:38:05

Family

VulnCheck

State

PUBLISHED

Description

Xorcom CompletePBX is vulnerable to an authenticated path traversal, allowing for arbitrary file reads via the Backup and Restore functionality.This issue affects CompletePBX: through 5.2.35.