CVE-2025-10209: Papermerge DMS Authorization Token improper authorization
A security flaw has been discovered in Papermerge DMS up to 3.5.3. This issue affects some unknown processing of the component Authorization Token Handler. Performing manipulation results in improper authorization. The attack can be initiated remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10209?
CVE-2025-10209 is categorized as a critical vulnerability due to its potential for remote exploitation leading to improper authorization.
How do I fix CVE-2025-10209?
To fix CVE-2025-10209, upgrade Papermerge DMS to version 3.5.4 or later, which addresses the security flaw.
What components are affected by CVE-2025-10209?
CVE-2025-10209 affects the Authorization Token Handler component in Papermerge DMS up to version 3.5.3.
Can CVE-2025-10209 be exploited remotely?
Yes, CVE-2025-10209 can be exploited remotely, allowing attackers to manipulate authorization processes.
What are the potential consequences of exploiting CVE-2025-10209?
Exploiting CVE-2025-10209 could allow unauthorized users access to sensitive resources and data within Papermerge DMS.