CNNVD-202602-1881 Information

CNNVD ID

CNNVD-202602-1881

CVE-2020-37104

  • CNNVD Published: 2026-02-11

Description (Chinese)

ASTPP是Inextrix Technologies Pvt. Ltd开源的一个VoIP计费解决方案。 ASTPP 4.0.1版本存在安全漏洞,该漏洞源于信息泄露,可能导致未经验证的攻击者通过预测备份文件名模式下载数据库备份文件。

Description (English)

ASTPP is a VoIP billing solution for the Inextrix Technologies Pvt. Ltd open source. There is a security loophole in ASTPP version 4.01, which stems from the disclosure of information and may result in unverified assailants downloading database backup files by predicting a backup file name model.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

Inextrix Technologies Pvt. Ltd

Published

2026-02-11

Last Modified

2026-02-24

References

https://github.com/iNextrix/ASTPP https://www.astppbilling.org/ https://www.exploit-db.com/exploits/47900 https://www.vulncheck.com/advisories/astpp-voip-billing-database-backup-download

Patch

https://github.com/iNextrix/ASTPP/releases

Share on: