ZeroHour

CVE-2025-51533

PoC
CVSS 3.1
5.3 medium
EPSS
<1%p24
Published
()
Modified
Description

An Insecure Direct Object Reference (IDOR) in Sage DPW v2024_12_004 and below allows unauthorized attackers to access internal forms via sending a crafted GET request.

Vendors
sagedpw
Products
sage dpw
Weakness
CWE-639
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

In the news

No ingested article mentions this CVE yet.