CVE-2025-60375
The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validation. By sending empty username and password parameters in the login request, an attacker can gain unauthorized access to user accounts, including administrative accounts, without providing valid credentials.
Vendor
-
Product
-
CWE
Yayın Tarihi
2025-10-09 21:15:39
Güncelleme
2025-10-14 19:37:28
Source Identifier
cve@mitre.org
KEV Date Added
-