CVE-2025-40659 — Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS

CVE-2025-40659

Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS PUBLISHED

Description (CNA)

An Insecure Direct Object Reference (IDOR) vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/framesSelectionNetworks.asp.

Affected (CNA)

Vendor / product	Versions
Dmacroweb / DM Corporative CMS	affected 0 before 2025.01

CWE

CWE-639

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-dm-corporative-cms-dmacroweb

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.