CVE-2020-19363: Vtiger CRM

Medium severity, CVSS 6.5. EPSS: 3.6% chance of exploitation in the next 30 days.

Vtiger CRM v7.2.0 allows an attacker to display hidden files, list directories by using /libraries and /layout directories.

Affected products

• Vtiger Vtiger CRM: version 7.2.0 only

Published 2021-01-20. Last modified 2026-06-17.