What’s Vulnerable › Vulnerabilities

CVE-2025-3013: Insecure direct object references (IDOR) in NightWolf Penetration Platform

• Severity: high (CVSS 8.3 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-03-31 · updated 2026-06-17
• Weakness: CWE-285

Description

Insecure Direct Object References (IDOR) in access control in Customer Portal before 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references.

Affected products

• FPT Software NightWolf Penetration Platform: from 2.1.2 through 2.1.4

References

• https://bug.report.night-wolf.io/changelogs

Get alerted when CVE-2025-3013 or the next vulnerability affects your stack