Security Advisory

CVE-2025-52892

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-08-05 00:17:16

Last updated 2025-08-05 13:48:45

Assigner GitHub_M

State PUBLISHED

Description

EspoCRM is a web application with a frontend designed as a single-page application and a REST API backend written in PHP. In versions 9.1.6 and below, if a user loads Espo in the browser with double slashes (e.g https://domain//#Admin) and the webserver does not strip the double slash, it can cause a corrupted Slim routers cache. This will make the instance unusable until there is a completed rebuild. This is fixed in version 9.1.7.

← Browse all CVEs View on cve.org ↗