CVE-2025-3013
Insecure direct object references (IDOR) in NightWolf Penetration Platform
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Insecure direct object references (IDOR) in NightWolf Penetration Platform
Insecure Direct Object References (IDOR) in access control in Customer Portal before 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references.
Reserved 2025-03-31 | Published 2025-03-31 | Updated 2025-03-31 | Assigner FSOFTCWE-285: Improper Authorization
| 2025-03-27: | The reporter submits the vulnerability to security_report@fpt.com. |
| 2025-03-28: | The security team verifies the issue and provides a fixing solution. |
| 2025-03-29: | The security team releases the fix, retests the issue, and closes the vulnerability. |
| 2025-03-31: | Assign a CVE to the reporter. |
Phan Quang Bao (quangbao368@gmail.com)
bug.report.night-wolf.io/changelogs
Support options
