目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1325 元

100%
请我们喝杯咖啡

CVE-2025-31324— SAP NetWeaver Visual Composer Metadata Uploader 代码问题漏洞

CVSS 10.0 · Critical KEV · 勒索软件 EPSS 99.32% · P100

公开利用映射 1

Nuclei · 1 CVE-2025-31324.yaml [template]
获取后续新漏洞提醒登录后订阅

一、 漏洞 CVE-2025-31324 基础信息

漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title
Missing Authorization check in SAP NetWeaver (Visual Composer development server)
来源: 美国国家漏洞数据库 NVD
Vulnerability Description
SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.
来源: 美国国家漏洞数据库 NVD
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
来源: 美国国家漏洞数据库 NVD
Vulnerability Type
危险类型文件的不加限制上传
来源: 美国国家漏洞数据库 NVD
Vulnerability Title
SAP NetWeaver Visual Composer Metadata Uploader 代码问题漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
SAP NetWeaver Visual Composer Metadata Uploader是德国思爱普（SAP）公司的一个用于辅助建模的工具。 SAP NetWeaver Visual Composer Metadata Uploader存在代码问题漏洞，该漏洞源于授权不当，可能导致上传恶意可执行文件。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD

神龙十问 — AI 深度分析

十问解析：根本原因、利用方式、修复建议、紧迫性。摘要免费，完整版需登录。

查看摘要 完整分析（登录）

受影响产品

厂商产品影响版本CPE订阅
SAP_SESAP NetWeaver (Visual Composer development server) VCFRAMEWORK 7.50 -

二、漏洞 CVE-2025-31324 的公开POC

#POC 描述源链接神龙链接
1SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31324.yamlPOC详情
2SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.https://github.com/rxerium/CVE-2025-31324POC详情
3CVE-2025-31324, SAP Exploithttps://github.com/redrays-io/CVE-2025-31324POC详情
4Nonehttps://github.com/Onapsis/Onapsis_CVE-2025-31324_Scanner_ToolsPOC详情
5SAP PoC para CVE-2025-31324https://github.com/moften/CVE-2025-31324POC详情
6Nuclei template for cve-2025-31324 (SAP)https://github.com/moften/CVE-2025-31324-NUCLEIPOC详情
7SAP NetWeaver Unauthenticated Remote Code Executionhttps://github.com/Alizngnc/SAP-CVE-2025-31324POC详情
8Proof-of-Concept for CVE-2025-31324: Unauthenticated upload in SAP NetWeaver Visual Composer Metadata Uploaderhttps://github.com/ODST-Forge/CVE-2025-31324_PoCPOC详情
9Proof-of-Concept for CVE-2025-31324: Unauthenticated upload in SAP NetWeaver Visual Composer Metadata Uploaderhttps://github.com/abrewer251/CVE-2025-31324_PoC_SAPPOC详情
10Unauthenticated upload in SAP NetWeaver Visual Composer Metadata Uploaderhttps://github.com/Pengrey/CVE-2025-31324POC详情
11Python-based Burp Suite extension is designed to detect the presence of CVE-2025-31324https://github.com/BlueOWL-overlord/Burp_CVE-2025-31324POC详情
12A totally unauthenticated file-upload endpoint in Visual Composer lets anyone drop arbitrary files (e.g., a JSP web-shell) onto the server.https://github.com/nullcult/CVE-2025-31324-File-UploadPOC详情
13🔍 A simple Bash script to detect malicious JSP webshells, including those used in exploits of SAP NetWeaver CVE-2025-31324.https://github.com/respondiq/jsp-webshell-scannerPOC详情
14A Python-based security scanner for identifying the CVE-2025-31324 vulnerability in SAP Visual Composer systems, and detecting known Indicators of Compromise (IOCs) such as malicious .jsp.https://github.com/JonathanStross/CVE-2025-31324POC详情
15CVE-2025-31324 & CVE-2025-42999 vulnerability and compromise assessment toolhttps://github.com/Onapsis/Onapsis-Mandiant-CVE-2025-31324-Vuln-Compromise-AssessmentPOC详情
16Research Purposes onlyhttps://github.com/rf-peixoto/sap_netweaver_cve-2025-31324-POC详情
17Nonehttps://github.com/NULLTRACE0X/CVE-2025-31324POC详情
18sap-netweaver-cve-2025-31324-checkhttps://github.com/nairuzabulhul/nuclei-template-cve-2025-31324-checkPOC详情
19SAP NetWeaver Visual Composer Metadata Uploader <= 7.50 CVE-2025-31324 PoChttps://github.com/sug4r-wr41th/CVE-2025-31324POC详情
20sap netweaver 0day poc by shinyhunters (scattered lapsus$ hunters) affecting all 7.x CVE-2025-31324https://github.com/antichainalysis/sap-netweaver-0day-CVE-2025-31324POC详情
21Nonehttps://github.com/harshitvarma05/CVE-2025-31324-ExploitsPOC详情
22Proof-of-Concept 0day for SAP NetWeaver created by ShinyHuntershttps://github.com/aristois913/CVE-2025-31324POC详情
AI 生成 POC高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2025-31324 的情报信息

请登录查看更多情报信息。

IV. Related Vulnerabilities

Same product: SAP NetWeaver (Visual Composer development server)
Same vendor: SAP_SE
Same weakness: CWE-434

V. Comments for CVE-2025-31324

暂无评论

发表评论