CVE-2025-51627 | THREATINT

Description

Incorrect access control in CaricaVerbale in Agenzia Impresa Eccobook v2.81.1 allows authenticated attackers with low-level access to escalate privileges to Administrator.

PUBLISHED Reserved 2025-06-16 | Published 2025-08-05 | Updated 2025-08-05 | Assigner mitre

References

agenziaimpresa.com

eccobook.com

github.com/...blob/main/CVE PoC/CVE-2025-51627 | Eccobook.md

cve.org (CVE-2025-51627)

nvd.nist.gov (CVE-2025-51627)

Download JSON