Medium · 5.3 CVE-2025-51533 EUVD-2025-23938GHSA-pm47-fvg6-h3r6

An Insecure Direct Object Reference (IDOR) in Sage DPW v2024_12_004 and below allows unauthorized attackers to access internal forms via se…

Published Aug 7, 2025 · Updated Aug 7, 2025 · Assigned by mitre

Description

An Insecure Direct Object Reference (IDOR) in Sage DPW v2024_12_004 and below allows unauthorized attackers to access internal forms via sending a crafted GET request.

References

https://www.sec4you-pentest.com/schwachstellen
https://www.sec4you-pentest.com/schwachstelle/sage-dpw-vorhersehbare-url-ids-ermoeglichen-unautorisierten-zugriff-auf-interne-formulare/