CVE-2023-38891

概要

参考情報

• code.vtiger.com/vtiger/vtigercrm/-/blob/master/modules/Reports/ReportRun.php · Third Party Advisory
• jselliott/CVE-2023-38891 · Third Party Advisory

vtiger crm のその他の脆弱性

• CVE-2025-45753高 7.2A vulnerability in Vtiger CRM Open Source Edition v8.3.0 allows an attacker with admin privileges to execute arbitrary PHP code by exploitin…
• CVE-2025-45755中 6.1A Stored Cross-Site Scripting (XSS) vulnerability exists in Vtiger CRM Open Source Edition v8.3.0, exploitable via the Services Import featu…
• CVE-2025-1618中 6.1A vulnerability has been found in vTiger CRM 6.4.0/6.5.0 and classified as problematic. This vulnerability affects unknown code of the file …
• CVE-2024-54687中 6.1Vtiger CRM v.6.1 and before is vulnerable to Cross Site Scripting (XSS) via the Documents module and function uploadAndSaveFile in CRMEntity…
• CVE-2024-48119中 5.4Vtiger CRM v8.2.0 has a HTML Injection vulnerability in the module parameter. Authenticated users can inject arbitrary HTML.