CVE-2026-13724

Client-Side Enforcement of Server-Side Security vulnerability in Gobito Informatics Technologies Engineering Industry and Trade Ltd. Co. Corporate Training Management System allows Input Data Manipulation. This issue affects Corporate Training Management System: before dd1a9df64.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0582

Configurations

No configuration.

History

24 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Vulnerabilidad de seguridad del lado del servidor por imposición del lado del cliente en el Sistema de Gestión de Capacitación Corporativa de Gobito Informatics Technologies Engineering Industry and Trade Ltd. Co. permite la manipulación de datos de entrada. Este problema afecta al Sistema de Gestión de Capacitación Corporativa: antes de dd1a9df64.

Information

Published : 2026-07-20 16:16

Updated : 2026-10-24 20:10

NVD link : CVE-2026-13724

Mitre link : CVE-2026-13724

CVE.ORG link : CVE-2026-13724

JSON object : View

Products Affected

No product.

CWE

CWE-602

Client-Side Enforcement of Server-Side Security

{"id": "CVE-2026-13724", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-13724", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-21T13:40:06.627686Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "iletisim@usom.gov.tr", "affectedData": [{"vendor": "Gobito Informatics Technologies Engineering Industry and Trade Ltd. Co.", "product": "Corporate Training Management System", "versions": [{"status": "affected", "version": "0", "lessThan": "dd1a9df64", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-20T16:16:55.190", "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0582", "source": "iletisim@usom.gov.tr"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "description": [{"lang": "en", "value": "CWE-602"}]}], "descriptions": [{"lang": "en", "value": "Client-Side Enforcement of Server-Side Security vulnerability in Gobito Informatics Technologies Engineering Industry and Trade Ltd. Co. Corporate Training Management System allows Input Data Manipulation.\n\nThis issue affects Corporate Training Management System: before dd1a9df64."}, {"lang": "es", "value": "Vulnerabilidad de seguridad del lado del servidor por imposici\u00f3n del lado del cliente en el Sistema de Gesti\u00f3n de Capacitaci\u00f3n Corporativa de Gobito Informatics Technologies Engineering Industry and Trade Ltd. Co. permite la manipulaci\u00f3n de datos de entrada.\n\nEste problema afecta al Sistema de Gesti\u00f3n de Capacitaci\u00f3n Corporativa: antes de dd1a9df64."}], "lastModified": "2026-10-24T20:10:00.137", "sourceIdentifier": "iletisim@usom.gov.tr"}