vTiger CRM Directory File Disclosure

The remote instance of vTiger allows an unauthenticated attacker to view the contents of application directories, which could lead to the disclosure of sensitive information. Note that the solution does not prevent an attacker from retrieving files by guessing their names, only obtaining a...