PT-2025-32305 · Sage · Sage Dpw

Ferat Aydin · Published 2025-08-07 · Updated 2025-10-01 · CVE-2025-51533

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sage DPW versions 2024 12 004 and below Sage DPW version 2024.12.003

Description An Insecure Direct Object Reference (IDOR) exists in Sage DPW, allowing unauthorized attackers to access internal forms by sending a crafted GET request.

Recommendations Update Sage DPW to a version later than 2024 12 004. Update Sage DPW to a version later than 2024.12.003.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-51533

Affected Products

Sage Dpw

References · 9

• 🔥 https://sec4you-pentest.com/schwachstelle/sage-dpw-vorhersehbare-url-ids-ermoeglichen-unautorisierten-zugriff-auf-interne-formulare · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-51533 · Security Note
• https://osv.dev/vulnerability/CVE-2025-51533 · Vendor Advisory
• https://t.me/CVEtracker/29456 · Telegram Post
• https://t.me/cveNotify/137115 · Telegram Post
• https://sec4you-pentest.com/schwachstellen · Note
• https://twitter.com/CVEnew/status/1953530852123541849 · Twitter Post
• https://t.me/cveNotify/131337 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1953580344118055156 · Twitter Post