Paper/Archive/CVE-2025-1928

CVE-2025-1928

Restajet Information Technologies Inc. Online Food Delivery System — Improper Authentication in Restajet's Online Food Delivery System

EPSS 0.4%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (CNA)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 30.3.303 × 206.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Improper Restriction of Excessive Authentication Attempts vulnerability in Restajet Information Technologies Inc. Online Food Delivery System allows Password Recovery Exploitation. This issue affects Online Food Delivery System: through 19122025. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected

ProductAffectedFixed inSource

Online Food Delivery System≤ 19122025–CNA

Scores by source

TR-CERT (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refusom.gov.tr/bildirim/tr-25-0469 refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0469