NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring.Referenceshttps://github.com/0xfml/poc/blob/main/NCH/Axon_2.22_LFI.mdhttps://www.nch.com.au/pbx/index.html