CVE-2025-3013CWE-285

Insecure direct object references (IDOR) in NightWolf Penetration Platform

High · published March 31, 2025

CVSS v4.0
8.3
EPSS
0%
Percentile
23.4
In the wild
Unconfirmed
What it is

Insecure Direct Object References (IDOR) in access control in Customer Portal before 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references.

The record
Technical detail
CVSS v4.0
8.3 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
EPSS
0.00317 · 23.4th percentile
Weakness
CWE-285 · Improper Authorization
Published
2025-03-31T03:40Z
EPSS history
Timeline
  • 31 MAR 03:40Z
    Insecure direct object references (IDOR) in NightWolf Penetration Platform
    cvelistv5