An issue was discovered in FusionPBX before 4.5.30. The log_viewer.php Log View page allows an authenticated user to choose an arbitrary filename for download (i.e., not necessarily freeswitch.log in the intended directory).
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fusionpbx | Fusionpbx | * | 4.5.30 (excluding) |