CVE-2025-14341

Improperly controlled modification of Dynamically-Determined object attributes, Allocation of resources without limits or throttling vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Excessive Allocation, Flooding. This issue affects DivvyDrive: from 4.8.2.19 before 4.8.3.2.

CVSS v3 8.3 HIGH

8.3^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0182

Configurations

No configuration.

History

05 Oct 2026, 17:10

Type	Values Removed	Values Added
Summary		(es) Modificación indebidamente controlada de atributos de objeto determinados dinámicamente, vulnerabilidad de asignación de recursos sin límites ni limitación en DivvyDrive Information Technologies Inc. DivvyDrive permite la asignación excesiva, inundación. Este problema afecta a DivvyDrive: desde 4.8.2.19 antes de 4.8.3.2.

Information

Published : 2026-05-07 14:16

Updated : 2026-10-12 22:10

NVD link : CVE-2025-14341

Mitre link : CVE-2025-14341

CVE.ORG link : CVE-2025-14341

JSON object : View

Products Affected

No product.

CWE

CWE-770

Allocation of Resources Without Limits or Throttling

CWE-915

Improperly Controlled Modification of Dynamically-Determined Object Attributes

{"id": "CVE-2025-14341", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-14341", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-07T14:37:53.876866Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 5.5, "exploitabilityScore": 2.8}]}, "affected": [{"source": "iletisim@usom.gov.tr", "affectedData": [{"vendor": "DivvyDrive Information Technologies Inc.", "product": "DivvyDrive", "versions": [{"status": "affected", "version": "4.8.2.19", "lessThan": "4.8.3.2", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-05-07T14:16:00.660", "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0182", "source": "iletisim@usom.gov.tr"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "description": [{"lang": "en", "value": "CWE-770"}, {"lang": "en", "value": "CWE-915"}]}], "descriptions": [{"lang": "en", "value": "Improperly controlled modification of Dynamically-Determined object attributes, Allocation of resources without limits or throttling vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Excessive Allocation, Flooding.\n\nThis issue affects DivvyDrive: from 4.8.2.19 before 4.8.3.2."}, {"lang": "es", "value": "Modificaci\u00f3n indebidamente controlada de atributos de objeto determinados din\u00e1micamente, vulnerabilidad de asignaci\u00f3n de recursos sin l\u00edmites ni limitaci\u00f3n en DivvyDrive Information Technologies Inc. DivvyDrive permite la asignaci\u00f3n excesiva, inundaci\u00f3n.\n\nEste problema afecta a DivvyDrive: desde 4.8.2.19 antes de 4.8.3.2."}], "lastModified": "2026-10-12T22:10:00.247", "sourceIdentifier": "iletisim@usom.gov.tr"}