CVE-2025-1928

Published: Dec 19, 2025Modified: Jun 17, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 3.9 / Impact: 5.2

Source: iletisim@usom.gov.tr (Secondary)

Description

Improper Restriction of Excessive Authentication Attempts vulnerability in Restajet Information Technologies Inc. Online Food Delivery System allows Password Recovery Exploitation. This issue affects Online Food Delivery System: through 19122025. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected (1)

Products: Restajet: Online Food Delivery System

1 product

Online Food Delivery System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Restajet Online Food Delivery System	All versions

Related CWEs

Improper Restriction of Excessive Authentication Attempts

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.

References (2)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0469

Source: iletisim@usom.gov.tr

https://www.usom.gov.tr/bildirim/tr-25-0469

Source: iletisim@usom.gov.tr

Third Party Advisory

Timeline

No history available yet.