CVE-2025-51531

概要

参考情報

• sec4you-pentest.com/schwachstelle/sage-dpw-schwachstelle-xss-in-db-monitor-tabfields · Exploit
• sec4you-pentest.com/schwachstellen · Third Party Advisory

sage dpw のその他の脆弱性

• CVE-2025-67807中 4.7The login mechanism of Sage DPW 2025_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing ac…
• CVE-2025-67806中 5.3The login mechanism of Sage DPW 2021_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing ac…
• CVE-2025-67805高 7.5A non-default configuration in Sage DPW 2025_06_004 allows unauthenticated access to diagnostic endpoints within the Database Monitor featur…
• CVE-2025-51533中 5.3An Insecure Direct Object Reference (IDOR) in Sage DPW v2024_12_004 and below allows unauthorized attackers to access internal forms via sen…
• CVE-2025-51532高 7.5Incorrect access control in Sage DPW 2024_12_004 and earlier allows unauthorized attackers to access the built-in Database Monitor via a cra…