CVE-2025-0987

Summary

Authorization Bypass Through User-Controlled Key vulnerability in CB Project Ltd. Co. CVLand allows Parameter Injection.

This issue affects CVLand: from 2.1.0 through 20251103. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

Weaknesses

• CWE-639: CWE-639 Authorization Bypass Through User-Controlled Key

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.usom.gov.tr/bildirim/tr-25-0371
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0371

• ←Previous
• Next→