Vulnerability · Published Sep 25, 2025 · Assigned by TR-CERT
CVE-2025-10438Path Traversal in Yordam BT's Yordam Katalog
High 8.6
In plain English
A high-severity security flaw in Yordam Katalog from Yordam Information Technology Consulting Education and Electrical Systems Industry Trade Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).
Severity (CVSS 3.1)8.6High
Exploit odds (30 days)0.4%top 61.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Path Traversal: 'dir/../../filename' vulnerability in Yordam Information Technology Consulting Education and Electrical Systems Industry Trade Inc. Yordam Katalog allows Path Traversal. This issue affects Yordam Katalog: before 21.7.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Yordam Information Technology Consulting Education and Electrical Systems Industry Trade Inc. | Yordam Katalog | 0 – before 21.7 |
Weakness: CWE-27 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
References
- https://www.usom.gov.tr/bildirim/tr-25-0296 government-resource, broken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0296 government-resource