漏洞描述
Pascom versions before 7.20 packaged with Cloud Phone System contain a known server-side request forgery vulnerability.
影响产品
修复建议
建议关注厂商安全公告,及时升级至已修复版本,并结合实际资产暴露情况采取缓解措施。
参考链接
kerbit.iohttps://kerbit.io/research/read/blog/4↗www.pascom.nethttps://www.pascom.net/doc/en/release-notes/↗tutorialboy24.blogspot.comhttps://tutorialboy24.blogspot.com/2022/03/the-story-of-3-bugs-that-lead-to.html↗www.pascom.nethttps://www.pascom.net/doc/en/release-notes/pascom19/↗github.comhttps://github.com/ARPSyndicate/cvemon↗