Threats tagged 'ghsa-4m27-833c-75q4'

A critical insecure permissions vulnerability in Asterisk version 22 allows a remote attacker to execute arbitrary code via the action_createconfig function. This vulnerability has a high CVSS score of 9.8, indicating it is easily exploitable over the network without authentication or user interaction, and can lead to full system compromise.