CVE-2020-19363

CVE-2020-19363

EPSS 3.6%

Vtiger CRM v7.2.0 allows an attacker to display hidden files, list directories by using /libraries and /layout directories.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://emreovunc.com/blog/en/vtiger_crm_directorylisting_01.png https://emreovunc.com/blog/en/vtiger_crm_directorylisting_02.png https://github.com/EmreOvunc/Vtiger-CRM-Vulnerabilities/