CVE-2025-51533
BaseFortify
Publication date: 2025-08-07
Last updated on: 2025-10-01
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| sagedpw | sage_dpw | to 2025_06_000 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-639 | The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an Insecure Direct Object Reference (IDOR) in Sage DPW version 2024.12.003. It allows unauthorized attackers to access internal forms by sending a specially crafted GET request. The issue is fixed in version 2024_12_004.
How can this vulnerability impact me? :
The vulnerability can allow unauthorized users to access internal forms that they should not have access to, potentially exposing sensitive information or internal data without proper authorization.
What immediate steps should I take to mitigate this vulnerability?
The immediate step to mitigate this vulnerability is to update Sage DPW to the fixed version Halbjahresversion 2024_12_004.