PT-2025-52443 · Restajet Information Technologies · Online Food Delivery System

Berat Arslan · Published 2025-12-19 · Updated 2025-12-24 · CVE-2025-1928

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Restajet Information Technologies Inc. Online Food Delivery System versions through 19122025

Description An issue exists in Restajet Information Technologies Inc. Online Food Delivery System that allows for Password Recovery Exploitation due to improper restriction of excessive authentication attempts. The issue enables unlimited password recovery attempts, potentially leading to full account takeover.

Recommendations Versions prior to 19122025 should be updated.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2025-1928

Affected Products

Online Food Delivery System

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-1928 · Security Note
• https://twitter.com/0dayPublishing/status/2001992283067961788 · Twitter Post
• https://t.me/cveNotify/146325 · Telegram Post
• https://twitter.com/CVEnew/status/2002099157985865753 · Twitter Post
• https://twitter.com/cracbot/status/2003782774327800263 · Twitter Post
• https://t.me/CVEtracker/40272 · Telegram Post
• https://usom.gov.tr/bildirim/tr-25-0469 · Note
• https://twitter.com/CveFindCom/status/2002010762110259660 · Twitter Post