CVE-2025-1929

{"id": "CVE-2025-1929", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "published": "2025-08-15T12:15:25.203", "references": [{"url": "https://www.usom.gov.tr/bildirim/tr-25-0198", "source": "[email protected]"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Risk Yaz\u0131l\u0131m Teknolojileri Ltd. \u015eti. Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131 allows SQL Injection, CAPEC - 7 - Blind SQL Injection.This issue affects Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131: through 1.0.0.4."}, {"lang": "es", "value": "Neutralizaci\u00f3n inadecuada de elementos especiales utilizados en una vulnerabilidad de comando SQL (\"inyecci\u00f3n SQL\") en Risk Yaz?l?m Teknolojileri Ltd. ?ti. Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz?l?m? permite la inyecci\u00f3n SQL, CAPEC - 7 - Inyecci\u00f3n SQL ciega. Este problema afecta a Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz?l?m?: hasta 1.0.0.4."}], "lastModified": "2025-08-15T13:12:51.217", "sourceIdentifier": "[email protected]"}