Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 08:52:42 +0000 CVE-2025-52892 — EspoCRM is vulnerable to access denial through double slash in URI corrupting router cache https://cve.radiocsirt.org/vuln/cve-2025-52892 <p><strong>Affected:</strong> espocrm</p> <p>EspoCRM is a web application with a frontend designed as a single-page application and a REST API backend written in PHP. In versions 9.1.6 and below, if a user loads Espo in the browser with double slashes (e.g https://domain//#Admin) and the webserver does not strip the double slash, it can cause a corrupted Slim router&#39;s cache. This will make the instance unusable until there is a completed rebuild. This is fixed in version 9.1.7.</p> <p><strong>Affected:</strong> espocrm</p> <p>EspoCRM is a web application with a frontend designed as a single-page application and a REST API backend written in PHP. In versions 9.1.6 and below, if a user loads Espo in the browser with double slashes (e.g https://domain//#Admin) and the webserver does not strip the double slash, it can cause a corrupted Slim router&#39;s cache. This will make the instance unusable until there is a completed rebuild. This is fixed in version 9.1.7.</p> https://cve.radiocsirt.org/vuln/cve-2025-52892