CVE-2025-10438CWE-27

CVE-2025-10438

High · published September 25, 2025

CVSS v3.1
8.6
EPSS
0%
Percentile
37.9
In the wild
Unconfirmed
What it is

Path Traversal: 'dir/../../filename' vulnerability in Yordam Information Technology Consulting Education and Electrical Systems Industry Trade Inc. Yordam Katalog allows Path Traversal.

This issue affects Yordam Katalog: before 21.7.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00448 · 37.9th percentile
Weakness
CWE-27 · Path Traversal: 'dir/../../filename'
Published
2025-09-25T14:15Z
References (2)
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0296 · [email protected]https://www.usom.gov.tr/bildirim/tr-25-0296 · [email protected]
EPSS history
Timeline
  • 25 SEP 09:18Z
    Path Traversal in Yordam BT's Yordam Katalog
    cvelistv5