Medium · 6.5 CVE-2025-51627 EUVD-2025-23637GHSA-pf4x-ph8g-3vvh

Incorrect access control in CaricaVerbale in Agenzia Impresa Eccobook v2.81.1 allows authenticated attackers with low-level access to escal…

Published Aug 5, 2025 · Updated Jul 5, 2026 · Assigned by mitre

Description

Incorrect access control in CaricaVerbale in Agenzia Impresa Eccobook v2.81.1 allows authenticated attackers with low-level access to escalate privileges to Administrator.

References

https://github.com/CapgeminiCisRedTeam/Disclosure/blob/main/CVE%20PoC/CVE-2025-51627%20%7C%20Eccobook.md