High severity8.8NVD Advisory· Published Nov 21, 2019· Updated Jun 17, 2026

CVE-2019-19202

Description

In Vtiger 7.x before 7.2.0, the My Preferences saving functionality allows a user without administrative privileges to change his own role by adding roleid=H2 to a POST request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Vtiger/Vtigercrm
cpe:2.3:a:vtiger:vtiger_crm:*:*:*:*:*:*:*:*
Range: >=7.0,<7.2.0
Vtiger/Vtigerdescription
Vtiger/vTigerllm-fuzzy
Range: <7.2.0

Patches

Vulnerability mechanics

References

lists.vtigercrm.com/pipermail/vtigercrm-developers/2019-April/037964.htmlnvdPatchVendor Advisory
code.vtiger.com/vtiger/vtigercrm/issues/1126nvdExploitVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000