PT-2025-51822 · Gg Soft Software Services · Paperwork

Fatih Kirdar + 1 · CVE-2025-14101 · Published 2025-12-17 · Updated 2026-06-05

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions GG Soft Software Services Inc. PaperWork versions prior to 6.0 GG Soft Software Services Inc. PaperWork versions 5.2.0.9427 through 5.2.0.9427

Description An authorization bypass exists due to user-controlled keys, allowing exploitation of trusted identifiers. The issue allows bypassing authorization controls.

Recommendations Upgrade to PaperWork version 6.0 or later.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-14101

Affected Products

Paperwork

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-14101 · Security Note
• https://twitter.com/DFIR_Lab/status/2062702279447183565 · Twitter Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0464 · Note
• https://twitter.com/offseq/status/2001224357398356041 · Twitter Post
• https://twitter.com/cracbot/status/2003057980162625612 · Twitter Post
• https://usom.gov.tr/bildirim/tr-25-0464 · Note
• https://t.me/cveNotify/146069 · Telegram Post
• https://twitter.com/CVEnew/status/2001350814665998381 · Twitter Post
• https://t.me/cveNotify/165925 · Telegram Post
• https://t.me/CVEtracker/40043 · Telegram Post