What’s Vulnerable › Vulnerabilities

CVE-2020-21057

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-05-20 · updated 2026-06-17
• Weakness: CWE-22

Description

Directory Traversal vulnerability in FusionPBX 4.5.7, which allows a remote malicious user to delete folders on the system via the folder variable to app/edit/folderdelete.php.

Affected products

• fusionpbx: 4.5.7

References

• https://github.com/fusionpbx/fusionpbx/commit/026c3958c3c7ca6b2ff067addc991aac8f41cf11
• https://resp3ctblog.wordpress.com/2019/10/28/fusionpbx-path-traversal-4/
• https://github.com/fusionpbx/fusionpbx/commit/026c3958c3c7ca6b2ff067addc991aac8f41cf11
• https://resp3ctblog.wordpress.com/2019/10/28/fusionpbx-path-traversal-4/

Get alerted when CVE-2020-21057 or the next vulnerability affects your stack