Files
vuln-nvd/data/2025/CVE-2025-1928.json
T

2 lines
2.6 KiB
JSON
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"Online Food Delivery System","vendor":"Restajet Information Technologies Inc.","versions":[{"lessThanOrEqual":"19122025","status":"affected","version":"0","versionType":"custom"}]}],"source":"iletisim@usom.gov.tr"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:restajet:online_food_delivery_system:-:*:*:*:*:*:*:*","matchCriteriaId":"D9645287-A3CA-4036-B2DB-513F54F58AE6","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper Restriction of Excessive Authentication Attempts vulnerability in Restajet Information Technologies Inc. Online Food Delivery System allows Password Recovery Exploitation.\n\nThis issue affects Online Food Delivery System: through 19122025. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."},{"lang":"es","value":"Vulnerabilidad de restricción inadecuada de intentos de autenticación excesivos en el sistema de entrega de comida en línea de Restajet Information Technologies Inc. permite la explotación de recuperación de contraseña. Este problema afecta al sistema de entrega de comida en línea: hasta el 19122025. NOTA: Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."}],"id":"CVE-2025-1928","lastModified":"2026-06-17T08:40:21.680","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.2,"source":"iletisim@usom.gov.tr","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-1928","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-12-19T13:53:31.375709Z","version":"2.0.3"}}]},"published":"2025-12-19T13:16:03.313","references":[{"source":"iletisim@usom.gov.tr","url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0469"},{"source":"iletisim@usom.gov.tr","tags":["Third Party Advisory"],"url":"https://www.usom.gov.tr/bildirim/tr-25-0469"}],"sourceIdentifier":"iletisim@usom.gov.tr","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-307"}],"source":"iletisim@usom.gov.tr","type":"Secondary"}]}