Description
SAP NetWeaver Visual Composer Metadata Uploader是德国思爱普（SAP）公司的一个用于辅助建模的工具。 SAP NetWeaver Visual Composer Metadata Uploader存在代码问题漏洞，该漏洞源于授权不当，可能导致上传恶意可执行文件。
SAP Netweaver metadatauploader 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2025-31324
https://cloud.tencent.com/developer/article/2549764
https://zhuanlan.zhihu.com/p/1906086708686090622
https://unit42.paloaltonetworks.com/threat-brief-sap-netweaver-cve-2025-31324/
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-040/
https://www.ihonker.com/thread-33342-1-1.html
https://nvd.nist.gov/vuln/detail/CVE-2025-31324
https://onapsis.com/blog/active-exploitation-of-sap-vulnerability-cve-2025-31324/
https://reliaquest.com/blog/threat-spotlight-reliaquest-uncovers-vulnerability-behind-sap-netweaver-compromise/
https://www.paloaltonetworks.com/blog/security-operations/rapid-response-to-cve-2025-31324-mitigating-sap-netweaver-visual-composer-exploitation/
https://www.rapid7.com/blog/post/2025/04/28/etr-active-exploitation-of-sap-netweaver-visual-composer-cve-2025-31324/