VTiger CRM 6.4.0 – Security Patch Release

Security patch has just been released addressing multiple vulnerabilities within VTiger, patch covers minor xss and non-admin access control issues shared by security advisories (Sebastian Haas & Tomotaka – JPCERT/CC).

This is a security release for all previous versions and we strongly encourage you to update your instance immediately.

How to apply the patch?

1. Backup your VTiger files & database (recommended but not needed assuming you know your way around the system).
2. Download patch from here
3. Overwrite the files from the patch to the VTiger file system
   • /include/utils/VtlibUtils.php
   • /modules/Users/actions/Save.php
   • vtigerversion.php

Assistance

Not sure or comfortable applying the patch yourself? Please email us at support@vtexperts.com and we’ll have one of our experienced developers apply it for you.