CVE-2025-52575— EspoCRM vulnerable to LDAP Injection through Improper Neutralization of Special Elements
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-52575
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
EspoCRM vulnerable to LDAP Injection through Improper Neutralization of Special Elements
Source: NVD (National Vulnerability Database)
Vulnerability Description
EspoCRM is an Open Source CRM (Customer Relationship Management) software. EspoCRM versions 9.1.6 and earlier are vulnerable to blind LDAP Injection when LDAP authentication is enabled. A remote, unauthenticated attacker can manipulate LDAP queries by injecting crafted input containing wildcard characters (e.g., *). This may allow the attacker to bypass authentication controls, enumerate valid usernames, or retrieve sensitive directory information depending on the LDAP server configuration. This was fixed in version 9.1.7.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
LDAP查询中使用的特殊元素转义处理不恰当(LDAP注入)
Source: NVD (National Vulnerability Database)
Vulnerability Title
EspoCRM 注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
EspoCRM是EspoCRM开源的一套开源的基于Web的客户关系管理系统（CRM）。该系统提供销售自动化、社区和客户支持等功能。 EspoCRM 9.1.6及之前版本存在注入漏洞，该漏洞源于LDAP查询输入验证不足，可能导致盲LDAP注入攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-52575
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-52575
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: espocrm
- CVE-2026-33733
EspoCRM has Admin TemplateManager path traversal that allows - CVE-2026-33656
EspoCRM vulnerable to authenticated RCE via Formula with pat - CVE-2026-33740
EspoCRM: Email importEml can import and delete another user' - CVE-2026-33659
EspoCRM: SSRF via DNS Rebinding in Attachment fromImageUrl E - CVE-2026-33657
EspoCRM: Stored HTML injection in email notifications about
Same vendor: espocrm
- CVE-2026-33733
EspoCRM has Admin TemplateManager path traversal that allows - CVE-2026-33656
EspoCRM vulnerable to authenticated RCE via Formula with pat - CVE-2026-33740
EspoCRM: Email importEml can import and delete another user' - CVE-2026-33659
EspoCRM: SSRF via DNS Rebinding in Attachment fromImageUrl E - CVE-2026-33657
EspoCRM: Stored HTML injection in email notifications about
Same weakness: CWE-90
- CVE-2026-40606
ProxyAuth Addon LDAP Injection in mitmproxy - CVE-2026-40459
LDAP Injection in PAC4J - CVE-2026-40193
Maddy Mail Server: LDAP Filter Injection via Unsanitized Use - CVE-2026-0636
LDAP Injection Vulnerability in LDAPStoreHelper.java - CVE-2026-39962
LDAP injection in MISP ApacheAuthenticate when using a user-
V. Comments for CVE-2025-52575
No comments yet