PT-2025-31948 · Unknown · Agenzia Impresa Eccobook

Simone Aiello · Published 2025-08-05 · Updated 2025-08-05 · CVE-2025-51628

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Agenzia Impresa Eccobook versions prior to 2.81.2

Description An Insecure Direct Object Reference (IDOR) vulnerability exists in the PdfHandler component. This allows unauthenticated attackers to read confidential documents. The vulnerability is triggered through the DocumentoId parameter.

Recommendations Update Agenzia Impresa Eccobook to a version prior to 2.81.2.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-51628

Affected Products

Agenzia Impresa Eccobook

References · 6

• 🔥 https://github.com/CapgeminiCisRedTeam/Disclosure/blob/main/CVE%20PoC/CVE-2025-51628%20%7C%20Eccobook.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-51628 · Security Note
• https://t.me/CVEtracker/29227 · Telegram Post
• https://twitter.com/CVEnew/status/1952788235538583882 · Twitter Post
• http://eccobook.com · Note
• http://agenzia.com · Note