Improper Authentication Vulnerability in Metasoft MetaCRM

CVE-2025-7875

What is CVE-2025-7875?

A vulnerability in Metasoft's MetaCRM software up to version 6.4.2 allows for improper authentication, potentially letting attackers access sensitive functionalities remotely. The issue arises from an insecure implementation found within the '/debug.jsp' file. This vulnerability has been publicly disclosed, raising concerns over its possible exploitation in real-world scenarios. Despite earlier notification, the vendor has not provided a response, highlighting the urgency for users to assess their security posture and patch their systems accordingly.

References