CVE-2024-44776

MediumCVSS 6.1

Published: 29/08/2024(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

22th percentile - higher than 22% of all known CVEs

Summary

An Open Redirect vulnerability was found in vTiger CRM v7.4.0 in the 'page' parameter. An attacker can craft a URL to redirect users to a malicious site.

Risk Assessment

The risk involves potential phishing or social engineering attacks where victims clicking a link are redirected to a harmful site, leading to credential theft or malware infection.

Recommendation

Update vTiger CRM to the latest patched version. If an update is not possible, restrict system access and implement server-side validation of the 'page' parameter.

Original NVD description (English source)

An Open Redirect vulnerability in the page parameter of vTiger CRM v7.4.0 allows attackers to redirect users to a malicious site via a crafted URL.