CVE-2025-60375
The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validation. By sending empty username and pa…
Published: 2025-10-09 · CVSS: 7.3 · CVSS 3.1
The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validation. By sending empty username and password parameters in the login request, an attacker can gain unauthorized access to user accounts, including administrative accounts, without providing valid credentials.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7