{"uuid": "5969bb20-c61a-4ddf-b937-72276ee5cfd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2292", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/xorcom_completepbx_file_disclosure.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Valentin Lobstein\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an authenticated file disclosure vulnerability in CompletePBX <= 5.2.35.\\n          The issue resides in the backup download function, where user input is not properly validated,\\n          allowing an attacker to access arbitrary files on the system as root.\\n\\n          The vulnerability is triggered by setting the `backup` parameter to a Base64-encoded\\n          absolute file path, prefixed by a comma `,`. This results in the server exposing the\\n          file contents directly.\", \"disclosure_date\": \"2025-03-02\", \"fullname\": \"auxiliary/scanner/http/xorcom_completepbx_file_disclosure\", \"is_install_path\": true, \"mod_time\": \"2025-11-23 00:36:21 +0000\", \"name\": \"Xorcom CompletePBX Authenticated File Disclosure via Backup Download\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/xorcom_completepbx_file_disclosure.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/http/xorcom_completepbx_file_disclosure\", \"references\": [\"CVE-2025-2292\", \"URL-https://xorcom.com/new-completepbx-release-5-2-36-1/\", \"URL-https://chocapikk.com/posts/2025/completepbx/\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:59.406224Z"}