Vulnerability details
CVE-2025-1928
Restajet Information Technologies Online Food Delivery System
Improper Authentication in Restajet's Online Food Delivery System
CVSS 3.1
9.1Critical
Official description
Improper Restriction of Excessive Authentication Attempts vulnerability in Restajet Information Technologies Inc. Online Food Delivery System allows Password Recovery Exploitation. This issue affects Online Food Delivery System: through 19122025. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 9.1Critical | 3.1 | CVEProject cvelistV5 (CNA) (TR-CERT) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Restajet Information Technologies Inc. | Online Food Delivery System | v ≤ 19122025 | CVEProject cvelistV5 (CNA) |
References and advisories
2- https://www.usom.gov.tr/bildirim/tr-25-0469 government-resourcebroken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0469 government-resource
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-12-19
- Last updated
- 2026-06-06
- State
- Published
- Assigner (CNA)
- TR-CERT
Exploit prediction (EPSS)
0.36%
Probability of exploitation in 30 days
30.1%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-307Improper Restriction of Excessive Authentication Attempts