PT-2025-50329 · Im Park Information Technology · Dijidemi

Published 2025-12-10 · Updated 2026-06-04 · CVE-2025-13125

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi versions through 28.11.2025

Description An authorization bypass exists in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi due to exploitation of trusted identifiers. The issue allows bypassing authorization controls through a user-controlled key.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-13125

Affected Products

Dijidemi

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-13125 · Security Note
• https://usom.gov.tr/bildirim/tr-25-0442 · Note
• https://t.me/cveNotify/165920 · Telegram Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0442 · Note
• https://twitter.com/CVEnew/status/1998781304234553758 · Twitter Post