PT-2024-13351 · Vtiger · Vtiger Crm

Jselliott · Published 2024-04-30 · Updated 2025-04-22 · CVE-2023-46304

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Vtiger CRM version 7.5.0

Description The issue allows a remote authenticated attacker to run arbitrary PHP code because an unprotected endpoint allows them to write this code to the config.inc.php file, which is executed on every page load. This is due to a vulnerability in the modules/Users/models/Module.php file.

Recommendations For Vtiger CRM version 7.5.0, as a temporary workaround, consider restricting access to the vulnerable Module.php file until a patch is available. Additionally, avoid using the unprotected endpoint that allows writing to the config.inc.php file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2023-46304

Affected Products

Vtiger Crm

References · 9

• 🔥 https://github.com/jselliott/CVE-2023-46304 · Exploit
• https://code.vtiger.com/vtiger/vtigercrm/-/commit/317f9ca88b6bbded11058f20a1d232717c360d43 · Patch
• https://osv.dev/vulnerability/CVE-2023-46304 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-46304 · Security Note
• https://t.me/cvenotify/119418 · Telegram Post
• https://t.me/cvenotify/78585 · Telegram Post
• https://twitter.com/CVEnew/status/1785297217726619858 · Twitter Post
• https://code.vtiger.com/vtiger/vtigercrm/-/blob/master/modules/Users/models/Module.php · Note
• https://vtiger.com · Note