CVE-2025-31324 PoC — Missing Authorization check in SAP NetWeaver (Visual Composer development server)

Source

Associated Vulnerability

Description

SAP NetWeaver Unauthenticated Remote Code Execution

Readme

# SAP-CVE-2025-31324 POC

A tool to detect and exploit a critical unauthenticated file‐upload vulnerability in SAP NetWeaver Visual Composer.

# Description

SAP NetWeaver Visual Composer includes a component called Metadata Uploader which lacks proper authorization checks, allowing unauthenticated attackers to upload arbitrary executable files (e.g., JSP, WAR) to the application server and achieve remote code execution.

Affected Products

Product: SAP NetWeaver Visual Composer (VCFRAMEWORK 7.50)

Component: /developmentserver/metadatauploader

SAP Security Note: 3594142

1- Clone repository:

```git clone https://github.com/your-org/sap-cve-2025-31324-scanner.git```

```cd sap-cve-2025-31324-scanner```

2- Install dependencies 

```pip install requests urllib3```

```chmod +x scanner.py```

3- Single target scan

```./scanner.py -s sap.example.com:50000 -v```

4- Batch scan

```./scanner.py -l targets.txt -o report.txt```


# References

National Vulnerability Database: CVE‑2025‑31324 details (nvd.nist.gov)

SAP Support: Security Note 3594142 Patch Details

File Snapshot

 [4.0K]  /data/pocs/e032b09466954a15bcec119c7bd87a0ab53ea5f7
├── [1.1K]  README.md
└── [5.9K]  SAP-CVE-2025-31324.py

0 directories, 2 files

Remarks