Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-53566

An issue in the action_listcategories() function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0-rc2/22.0.0-pre1 allows attackers to execute a path traversal.

Published

2024-12-02T18:15:11.500

Last Modified

2025-08-25T18:31:10.780

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

Weaknesses

Type: Secondary
CWE-22

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	sangoma	asterisk	22.0.0	Yes
Application	sangoma	asterisk	22.0.0	Yes
Application	sangoma	asterisk	22.0.0	Yes
Application	sangoma	asterisk	22.0.0	Yes
Operating System	debian	debian_linux	11.0	Yes

References

https://gist.github.com/hyp164D1/e7c0f44ffb38c00320aa1a6d98bee616 Third Party Advisory ([email protected])
https://github.com/asterisk/asterisk/blob/22/main/manager.c#L2556 Product ([email protected])
https://lists.debian.org/debian-lts-announce/2025/02/msg00003.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)