CVE-2025-60375 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validation. By sending empt…
High CVSS: 7.3

CVE-2025-60375

The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validation. By sending empty username and password parameters in the login request, an attacker can gain unauthorized access to user accounts, including administrative accounts, without providing valid credentials.
Vendor
-
Product
-
CWE
CWE-289
Yayın Tarihi
2025-10-09 21:15:39
Güncelleme
2025-10-14 19:37:28
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

Referanslar