CVE-2020-19363
Published
CVSS v3
6.5
MEDIUM
CVSS v2
4.3
MEDIUM
Affected
1
PROJECT
Description
Vtiger CRM v7.2.0 allows an attacker to display hidden files, list directories by using /libraries and /layout directories.
Vtiger CRM v7.2.0 has Cross-Site Scripting (XSS) and directory listing vulnerabilities.