CVE-2025-3013

Summary

CVE-2025-3013 is a vulnerability affecting the Customer Portal version 2.1.3 and below of NightWolf Penetration Testing. This issue involves Insecure Direct Object References (IDOR) in the access control system. Attackers can exploit this flaw by manipulating request parameters or object references, gaining unauthorized access to sensitive customer information. This vulnerability poses a significant risk to data confidentiality and privacy. To mitigate this issue, it is recommended that users upgrade to the latest version of the Customer Portal as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.