PT-2025-7700 · Unknown · Vtiger Crm

Stux · Publicado 2025-02-24 · Atualizado 2026-01-29 · CVE-2025-1618

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions vTiger CRM version 6.4.0

Description A problematic issue has been identified, affecting the /modules/Mobile/index.php file. The manipulation of the operation argument leads to cross-site scripting. This issue can be exploited remotely.

Recommendations For version 6.4.0, as a temporary workaround, consider restricting access to the /modules/Mobile/index.php file until a patch is available. Avoid manipulating the operation argument in the affected file to minimize the risk of exploitation.

Correção

XSS

Code Injection

Enumeração de Fraquezas

CWE-79

CWE-94

Identificadores relacionados

BDU:2025-14401

CVE-2025-1618

Produtos afetados

Vtiger Crm

Referências · 12

• https://t.me/cvenotify/113062 · Publicação no Telegram
• https://vtiger.com · Nota
• https://vuldb.com/?id.296608 · Nota
• https://vuldb.com/?ctiid.296608 · Nota
• https://bdu.fstec.ru/vul/2025-14401 · Nota de Segurança
• https://twitter.com/CVEnew/status/1893886171534802956 · Publicação no Twitter
• https://vuldb.com/?submit.501840 · Nota
• https://t.me/cveNotify/150234 · Publicação no Telegram
• https://t.me/cvedetector/18784 · Publicação no Telegram
• https://t.me/cvenotify/112214 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-1618 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-1618 · Nota de Segurança