CVE-2025-45753
HIGHCVSS 7.2/10EPSS 0.38%
Last modified
CVE-2025-45753 is a high-severity vulnerability rated 7.2/10 on the CVSS scale. A vulnerability in Vtiger CRM Open Source Edition v8.3.0 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the ZIP import functionality in the Module Import feature.. EPSS estimates a 0.38% chance of exploitation in the next 30 days.
Description
A vulnerability in Vtiger CRM Open Source Edition v8.3.0 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the ZIP import functionality in the Module Import feature.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Vtiger | Vtiger Crm | 8.3.0 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-45753?
A vulnerability in Vtiger CRM Open Source Edition v8.3.0 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the ZIP import functionality in the Module Import feature.
How severe is CVE-2025-45753?
CVE-2025-45753 has a CVSS score of 7.2/10 (HIGH severity). The EPSS model estimates a 0.38% probability of exploitation in the next 30 days.
How do I fix CVE-2025-45753?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-45737An issue in NetEase (Hangzhou) Network Co., Ltd NeacSafe64 D…6.5
- CVE-2025-4574In crossbeam-channel rust crate, the internal `Channel` type…6.5
- CVE-2025-45746In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker …9.8
- CVE-2025-4575Issue summary: Use of -addreject option with the openssl x50…6.5
- CVE-2025-45751SourceCodester Web Based Pharmacy Product Management System …6.1
- CVE-2025-45752A vulnerability in SeedDMS 6.0.32 allows an attacker with ad…7.2
- CVE-2025-45754A stored cross-site scripting (XSS) vulnerability exists in …5.4
- CVE-2025-45755A Stored Cross-Site Scripting (XSS) vulnerability exists in …6.1
- CVE-2025-4576A reflected cross-site scripting (XSS) vulnerability in the …6.1
- CVE-2025-45764jsrsasign v11.1.0 was discovered to contain weak encryption.…3.2
- CVE-2025-45765ruby-jwt v3.0.0.beta1 was discovered to contain weak encrypt…9.1
- CVE-2025-45766poco v1.14.1-release was discovered to contain weak encrypti…7
Are you affected by CVE-2025-45753?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST