PT-2025-51251 · Newgen · Newgen Omnidocs

Cbx216 · Publicado 2025-12-15 · Atualizado 2025-12-15 · CVE-2025-65742

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Newgen OmniDocs version 11.0

Description An unauthenticated Broken Function Level Authorization (BFLA) exists in Newgen OmniDocs v11.0. This allows attackers to obtain sensitive information and execute a full account takeover by sending a specially crafted API request. The vulnerability occurs due to insufficient authorization checks, enabling unauthorized access to functionality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2025-65742

Produtos afetados

Newgen Omnidocs

Referências · 6

• 🔥 https://github.com/CBx216/CVE-2025-65742-Newgen-OmniDocs-LDAP-BFLA/blob/main/CVE-2025-65742.md · Exploit
• https://twitter.com/CVEnew/status/2000617523411120257 · Publicação no Twitter
• https://newgensoft.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-65742 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-65742 · Aviso do Fabricante
• https://t.me/CVEtracker/39856 · Publicação no Telegram