PT-2025-38128 · Unknown · Zirve Nova

Berat Arslan · Published 2025-09-17 · Updated 2025-09-17 · CVE-2025-0419

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Zirve Nova versions 235 through 20250131

Description Zirve Nova is susceptible to a Cross-Site Scripting (XSS) issue due to improper neutralization of input during web page generation. This allows for the injection of malicious scripts into web pages viewed by other users.

Recommendations Zirve Nova versions 235 through 20250131: Implement proper input validation and output encoding to neutralize potentially malicious scripts. Ensure all user-supplied data is sanitized before being displayed on web pages.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-0419

Affected Products

Zirve Nova

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-0419 · Security Note
• https://t.me/cveNotify/135638 · Telegram Post
• https://usom.gov.tr/bildirim/tr-25-0260 · Note
• https://twitter.com/CVEnew/status/1968349185796927701 · Twitter Post
• https://t.me/CVEtracker/32733 · Telegram Post