CVE-2025-31324 PoC — Missing Authorization check in SAP NetWeaver (Visual Composer development server)

Source

https://github.com/sug4r-wr41th/CVE-2025-31324

Associated Vulnerability

Title:Missing Authorization check in SAP NetWeaver (Visual Composer development server) (CVE-2025-31324)
Description:SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.

Description

SAP NetWeaver Visual Composer Metadata Uploader <= 7.50 CVE-2025-31324 PoC

Readme

# CVE-2025-31324

A proof of concept developed to exploit [CVE-2025-31324](https://nvd.nist.gov/vuln/detail/CVE-2025-31324).

# Usage

```
usage: python CVE-2025-31324.py --help

SAP NetWeaver Visual Composer Metadata Uploader <= 7.50 CVE-2025-31324 PoC

positional arguments:
  FILE           local file to upload

optional arguments:
  -h, --help     show this help message and exit
  --https        use HTTPS?
  --RHOST RHOST  remote host
  --RPORT RPORT  remote port
  -v, --version  show program's version number and exit
```

Use the following Google dork `inurl:/developmentserver/metadatauploader` to find vulnerable istances.

# Affected Versions

All versions of SAP NetWeaver Visual Composer Metadata Uploader <= 7.50

# Patch Guidance

Please, refer to the [official documentation](https://me.sap.com/notes/3594142).

# Authors

Made by [@sug4r-wr41th](https://github.com/sug4r-wr41th)

# Disclaimer

Fair Use disclaimer: for educational purposes only.

File Snapshot


 [4.0K]  /data/pocs/28e36f647f714441b6f9ad973f375f8f0ee3d20a
├── [1.0K]  CVE-2025-31324.py
└── [ 965]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!