CVE-2009-3251: Vtiger CRM

Medium severity, CVSS 4.0. EPSS: 1% chance of exploitation in the next 30 days.

include/utils/ListViewUtils.php in vtiger CRM before 5.1.0 allows remote authenticated users to bypass intended access restrictions and read the (1) visibility, (2) location, and (3) recurrence fields of a calendar via a custom view.

Affected products

• Vtiger Vtiger CRM: up to and including 5.1.0

Published 2009-09-18. Last modified 2026-06-16.