A vulnerability in Vtiger CRM Open Source Edition v8.3.0 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the ZIP import functionality in the Module Import feature.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.simonjuguna.com/cve-2025-45753-authenticated-remote-code-execution-vulnerability-in-vtiger-open-source-edition-v8-3-0/ | Third Party Advisory |
Configurations
History
10 Jun 2025, 19:34
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Vtiger
Vtiger vtiger Crm |
|
| CPE | cpe:2.3:a:vtiger:vtiger_crm:8.3.0:*:*:*:*:*:*:* | |
| References | () https://www.simonjuguna.com/cve-2025-45753-authenticated-remote-code-execution-vulnerability-in-vtiger-open-source-edition-v8-3-0/ - Third Party Advisory |
21 May 2025, 21:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-21 21:16
Updated : 2025-06-10 19:34
NVD link : CVE-2025-45753
Mitre link : CVE-2025-45753
JSON object : View
Products Affected
vtiger
- vtiger_crm
CWE
No CWE.