CVE-2025-13125

Authorization Bypass Through User-Controlled Key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi allows Exploitation of Trusted Identifiers. This issue affects DijiDemi: through 28.11.2025.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0442
https://www.usom.gov.tr/bildirim/tr-25-0442

Configurations

No configuration.

History

14 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Vulnerabilidad de omisión de autorización a través de clave controlada por el usuario en Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi permite la explotación de identificadores de confianza. Este problema afecta a DijiDemi: hasta el 28.11.2025.

Information

Published : 2025-12-10 15:15

Updated : 2026-10-14 21:10

NVD link : CVE-2025-13125

Mitre link : CVE-2025-13125

CVE.ORG link : CVE-2025-13125

JSON object : View

Products Affected

No product.

CWE

CWE-639

Authorization Bypass Through User-Controlled Key

{"id": "CVE-2025-13125", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-13125", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-10T14:31:59.622957Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "iletisim@usom.gov.tr", "affectedData": [{"vendor": "Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co.", "product": "DijiDemi", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "28.11.2025"}], "defaultStatus": "unaffected"}]}], "published": "2025-12-10T15:15:56.233", "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0442", "source": "iletisim@usom.gov.tr"}, {"url": "https://www.usom.gov.tr/bildirim/tr-25-0442", "source": "iletisim@usom.gov.tr"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "description": [{"lang": "en", "value": "CWE-639"}]}], "descriptions": [{"lang": "en", "value": "Authorization Bypass Through User-Controlled Key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi allows Exploitation of Trusted Identifiers.\n\nThis issue affects DijiDemi: through 28.11.2025."}, {"lang": "es", "value": "Vulnerabilidad de omisi\u00f3n de autorizaci\u00f3n a trav\u00e9s de clave controlada por el usuario en Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi permite la explotaci\u00f3n de identificadores de confianza. Este problema afecta a DijiDemi: hasta el 28.11.2025."}], "lastModified": "2026-10-14T21:10:00.183", "sourceIdentifier": "iletisim@usom.gov.tr"}