CVE-2025-51533: Sagedpw Sage Dpw

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

An Insecure Direct Object Reference (IDOR) in Sage DPW v2024_12_004 and below allows unauthorized attackers to access internal forms via sending a crafted GET request.

Affected products

• Sagedpw Sage Dpw: before 2025_06_000 (fixed in 2025_06_000)

Published 2025-08-07. Last modified 2026-06-17.