PT-2025-39822 · Deneme · Deneme

Published 2025-09-29 · Updated 2025-09-30 · CVE-2025-11150

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions deneme version 1.33

Description deneme version 1.33 is susceptible to HTTP Request Splitting. The provided descriptions lack detailed information about the issue beyond this core finding. The descriptions contain placeholder text and a perfect CVSS score of 10.0, but do not offer substantial technical details. The affected API endpoints and vulnerable parameters are not specified.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Argument Injection

Weakness Enumeration

CWE-88

Related Identifiers

CVE-2025-11150

Affected Products

Deneme

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-11150 · Security Note
• https://t.me/CVEtracker/33623 · Telegram Post
• https://deneme.com · Note
• https://twitter.com/0dayPublishing/status/1972619545215938686 · Twitter Post
• https://t.me/cveNotify/136784 · Telegram Post
• https://twitter.com/mdisec/status/1972941484195520926 · Twitter Post