Is CVE-2009-3248 actively exploited?

CVE-2009-3248 has no public evidence of in-the-wild exploitation as of 2026-04-23.

What is the CVSS score for CVE-2009-3248?

CVE-2009-3248 has a CVSS score of 6.8 (UNKNOWN severity). Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P.

How do I patch CVE-2009-3248?

Patch guidance is available from vtiger security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2009-3248.

CVE-2009-3248 - remediation guidance & executive summary

Description

Cross-site request forgery (CSRF) vulnerability in the RSS module in vtiger CRM 5.0.4 allows remote attackers to hijack the authentication of Admin users for requests that modify the news feed system via the rssurl parameter in a Save action to index.php.

CVSS Metrics

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Access Vector: network
Access Cmplx: medium
Auth: none
Confidentiality: partial
Integrity: partial
Availability: partial
Weaknesses: CWE-352 · Cross-Site Request Forgery

Metadata

Primary Vendor: VTIGER
Published: 9/18/2009
Last Modified: 4/23/2026
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

CVE-2009-3248

Description

CVSS Metrics

Metadata

Affected Products

Remediation Guidance

Executive Summary