GHSA lookup

GHSA-JF2J-JHVF-RC56

Pruva has a verified reproduction for GHSA-JF2J-JHVF-RC56: Vtiger CRM through 8.4.0 allows authenticated admin users to achieve remote code execution by uploading a crafted module ZIP that places PHP files in the web-accessible modules/ directory.. The canonical evidence record is REPRO-2026-00273.

REPRO

REPRO-2026-00273

Package

Vtiger CRM · other

Severity

HIGH

Status

published

Open verified reproduction Plain text for agents GitHub advisory