← Database

CVE-2024-42995

HIGH CVSS: 8.3 Published: 2024-08-16 Modified: 2026-06-17

Description

VTiger CRM <= 8.1.0 does not correctly check user privileges. A low-privileged user can interact directly with the "Migration" administrative module to disable arbitrary modules.

Affected Platforms

Vtiger Vtiger Crm

Weakness Type

NVD-CWE-noinfo, CWE-269

References