SQL Injection in Freepbx Restapps

CVE-2025-62173

## Summary Authenticated SQL Injection Vulnerability in Endpoint Module Rest API

Vulnerability class: SQL Injection

EPSS: 0.002 (14.1th percentile) — read the EPSS interpretation.

Affected products

Freepbx Restapps — versions < 16.0.41, >= 17.0.0, < 17.0.6

Weakness classification (CWE)

CWE-89 — SQL Injection

References

security-advisories@github.com (x_refsource_CONFIRM)