
SAP PoC para CVE-2025-31324
Proof of concept exploit for vulnerability CVE-2025-31324 in SAP NetWeaver Visual Composer, which allows arbitrary file upload without authentication via the /developmentserver/metadatauploader endpoint.
⚠️ This code is for educational purposes and authorized testing only. Do not use it in production environments or against systems without permission.
The vulnerability allows an unauthenticated remote attacker to upload arbitrary files to the SAP server, which could lead to remote code execution (RCE) if executable files are uploaded.
python3 CVE-2025-31324.py <target URL> <file to upload>