CVE-2025-51533

An Insecure Direct Object Reference (IDOR) in Sage DPW v2024_12_004 and below allows unauthorized attackers to access internal forms via sending a crafted GET…

Medium · published August 7, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
23.2
In the wild
Unconfirmed
What it is

An Insecure Direct Object Reference (IDOR) in Sage DPW v2024_12_004 and below allows unauthorized attackers to access internal forms via sending a crafted GET request.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00315 · 23.2th percentile
Published
2025-08-07T00:00Z
EPSS history
Timeline
  • 07 AUG 00:00Z
    An Insecure Direct Object Reference (IDOR) in Sage DPW v2024_12_004 and below allows unauthorized attackers to access internal forms via sending a crafted GET…
    cvelistv5