Listen to this Post
How CVE-2025-50061 Works
This vulnerability in Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM) arises due to insufficient CSRF protections in the Web Access component. Attackers can craft malicious HTTP requests that, when executed by an authenticated low-privileged user, perform unauthorized actions such as data modification or extraction. The attack requires the victim to interact with a malicious link while logged into the application. Due to the application’s session handling, successful exploitation can lead to unintended changes in project data or exposure of sensitive information.
DailyCVE Form
Platform: Oracle Primavera P6
Version: 20.12.0-24.12.4
Vulnerability: CSRF
Severity: Medium
Date: 07/24/2025
Prediction: Patch by 10/2025
What Undercode Say
Analytics:
curl -X GET http://target/p6/endpoint -H "Cookie: SESSION_ID=compromised"
import requests
csrf_payload = {"action": "modify_data", "id": "123"}
requests.post("http://target/p6/api", data=csrf_payload)
How Exploit
1. Attacker crafts malicious link/script.
2. Victim clicks while authenticated.
3. Unauthorized request executes.
Protection from this CVE
1. Apply Oracle patches.
2. Enable CSRF tokens.
3. Restrict HTTP methods.
Impact
Unauthorized data access
Data manipulation
Session hijacking
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
