CVE-2025-14018

Published: Dec 22, 2025Modified: Jun 4, 2026Deferred

7.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Exploitability: 1.8 / Impact: 5.5

Source: iletisim@usom.gov.tr (Secondary)

Description

Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura allows Leveraging/Manipulating Configuration File Search Paths, Redirect Access to Libraries. This issue affects e-Fatura: before 1.2.15.

Related CWEs

CWE-428

Unquoted Search Path or Element

The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.

References (2)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0474

Source: iletisim@usom.gov.tr

https://www.usom.gov.tr/bildirim/tr-25-0474

Source: iletisim@usom.gov.tr

Timeline

No history available yet.