CVE-2025-14101 | THREATINT

Description

Authorization Bypass Through User-Controlled Key vulnerability in GG Soft Software Services Inc. PaperWork allows Exploitation of Trusted Identifiers.This issue affects PaperWork: from 5.2.0.9427 before 6.0.

PUBLISHED Reserved 2025-12-05 | Published 2025-12-17 | Updated 2025-12-18 | Assigner TR-CERT

HIGH: 7.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Problem types

CWE-639 Authorization Bypass Through User-Controlled Key

Product status

Default status

unaffected

5.2.0.9427 (custom) before 6.0

affected

Credits

Furkan YILDIZ finder

Fatih KIRDAR finder

References

www.usom.gov.tr/bildirim/tr-25-0464

cve.org (CVE-2025-14101)

nvd.nist.gov (CVE-2025-14101)

Download JSON