PT-2025-31198 · Dece · Geodi

Republic + 1 · CVE-2025-6175 · Published 2025-07-29 · Updated 2025-08-03

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions DECE Software Geodi versions prior to 9.0.146

Description The software contains an Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability, which allows for HTTP Request Splitting.

Recommendations Update to GEODI Setup 9.0.146 or later.

Fix

Weakness Enumeration

CWE-93

Related Identifiers

CVE-2025-6175

Affected Products

Geodi

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-6175 · Security Note
• https://twitter.com/cracbot/status/1951961290005434663 · Twitter Post
• https://twitter.com/CVEnew/status/1950186962247160231 · Twitter Post
• https://t.me/CVEtracker/28663 · Telegram Post
• https://usom.gov.tr/bildirim/tr-25-0182 · Note
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0182 · Note