{"id":86723,"date":"2026-03-19T06:30:09","date_gmt":"2026-03-19T06:30:09","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T06:00:00","slug":"cve-2025-51628-insecure-direct-object-reference-vulnerability-in-agenzia-impresa-eccobook-pdfhandler-component","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-51628-insecure-direct-object-reference-vulnerability-in-agenzia-impresa-eccobook-pdfhandler-component\/","title":{"rendered":"CVE-2025-51628: Insecure Direct Object Reference Vulnerability in Agenzia Impresa Eccobook PdfHandler Component<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

A critical vulnerability designated as CVE-2025-51628 has been identified in Agenzia Impresa Eccobook v2.81.1 and below. The vulnerability lies within the PdfHandler component, and is classified as an Insecure Direct Object Reference (IDOR) type, which can allow unauthenticated attackers to access confidential documents. This poses a significant risk to data security and confidentiality for users of the affected versions of the software.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-51628
\nSeverity: High (CVSS: 7.5)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Confidentiality breach through unauthorized access to sensitive documents<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n Share secrets securely\r\n <\/h2>\r\n\r\n

\r\n Ameeba is private infrastructure for communication and sensitive work built on encrypted identity instead of exposed corporate identity systems.\r\n <\/p>\r\n\r\n

\r\n Passwords, credentials, confidential files, screenshots, internal discussions, sensitive AI context, and private coordination should not become exposed across ordinary communication platforms.\r\n <\/p>\r\n\r\n