CVE-2025-45753

Name of the Vulnerable Software and Affected Versions Vtiger CRM Open Source Edition version 8.3.0

Description A vulnerability in the software allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the ZIP import functionality in the Module Import feature.

Recommendations For Vtiger CRM Open Source Edition version 8.3.0, consider disabling the ZIP import functionality in the Module Import feature until a patch is available. Restrict access to the Module Import feature to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.