{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "SAP NetWeaver Visual Composer zero-day: unauthenticated webshell uploads (CVE-2025-31324) · updates",
  "home_page_url": "https://pwn.watch/i/sap-netweaver-visual-composer-zero-day-cve-2025-31324",
  "feed_url": "https://pwn.watch/i/sap-netweaver-visual-composer-zero-day-cve-2025-31324/feed.json",
  "description": "A CVSS 10 missing-authorization flaw in the NetWeaver Visual Composer Metadata Uploader let anyone POST JSP webshells to /developmentserver/metadatauploader. ReliaQuest found it while investigating compromises; SAP shipped an emergency fix on April 24, 2025.",
  "language": "en",
  "_pwn": {
    "slug": "sap-netweaver-visual-composer-zero-day-cve-2025-31324",
    "severity": "critical",
    "status": "closed",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/sap-netweaver-visual-composer-zero-day-cve-2025-31324/feed.xml",
    "llms": "https://pwn.watch/i/sap-netweaver-visual-composer-zero-day-cve-2025-31324/llms.txt",
    "json": "https://pwn.watch/i/sap-netweaver-visual-composer-zero-day-cve-2025-31324.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/sap-netweaver-visual-composer-zero-day-cve-2025-31324#2025-05-15-b40e6551",
      "url": "https://pwn.watch/i/sap-netweaver-visual-composer-zero-day-cve-2025-31324#2025-05-15-b40e6551",
      "title": "SAP NetWeaver Visual Composer zero-day: unauthenticated webshell uploads (CVE-2025-31324): CISA adds the related NetWeaver flaw CVE-2025-42999 to KEV",
      "content_text": "SAP NetWeaver Visual Composer zero-day: unauthenticated webshell uploads (CVE-2025-31324): CISA adds the related NetWeaver flaw CVE-2025-42999 to KEV",
      "date_published": "2025-05-15T00:00:00.000Z",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/sap-netweaver-visual-composer-zero-day-cve-2025-31324#2025-04-29-d8edf2e2",
      "url": "https://pwn.watch/i/sap-netweaver-visual-composer-zero-day-cve-2025-31324#2025-04-29-d8edf2e2",
      "title": "SAP NetWeaver Visual Composer zero-day: unauthenticated webshell uploads (CVE-2025-31324): CISA adds CVE-2025-31324 to KEV",
      "content_text": "SAP NetWeaver Visual Composer zero-day: unauthenticated webshell uploads (CVE-2025-31324): CISA adds CVE-2025-31324 to KEV",
      "date_published": "2025-04-29T00:00:00.000Z",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/sap-netweaver-visual-composer-zero-day-cve-2025-31324#2025-04-24-9f9acd5a",
      "url": "https://pwn.watch/i/sap-netweaver-visual-composer-zero-day-cve-2025-31324#2025-04-24-9f9acd5a",
      "title": "SAP NetWeaver Visual Composer zero-day: unauthenticated webshell uploads (CVE-2025-31324): SAP releases an emergency fix; ReliaQuest publishes its findings",
      "content_text": "SAP NetWeaver Visual Composer zero-day: unauthenticated webshell uploads (CVE-2025-31324): SAP releases an emergency fix; ReliaQuest publishes its findings\n\nSource: https://reliaquest.com/blog/threat-spotlight-reliaquest-uncovers-vulnerability-behind-sap-netweaver-compromise/",
      "date_published": "2025-04-24T00:00:00.000Z",
      "external_url": "https://reliaquest.com/blog/threat-spotlight-reliaquest-uncovers-vulnerability-behind-sap-netweaver-compromise/",
      "tags": [
        "critical"
      ]
    }
  ]
}