CVE-2025-1269 - Vulnerability Details - OpenCVE

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing.This issue affects Liman MYS: before 2.1.1 - 1010.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact None

Availability Impact Low

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://github.com/limanmys/core/releases/tag/release.master.1010
https://www.usom.gov.tr/bildirim/tr-25-0038

History

Tue, 18 Feb 2025 14:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 18 Feb 2025 14:00:00 +0000

Type	Values Removed	Values Added
Description		URL Redirection to Untrusted Site ('Open Redirect') vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing.This issue affects Liman MYS: before 2.1.1 - 1010.
Title		Open Redirect in HAVELSAN's Open Source Project Liman MYS
Weaknesses		CWE-601
References		https://github.com/limanmys/core/releases/tag/release.master.1010 https://www.usom.gov.tr/bildirim/tr-25-0038
Metrics		cvssV3_1 `{'score': 4.8, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:L'}`

MITRE

Status: PUBLISHED

Assigner: TR-CERT

Published: 2025-02-18T13:48:29.384Z

Updated: 2025-02-20T11:20:46.686Z

Reserved: 2025-02-13T08:05:35.858Z

Link: CVE-2025-1269

Vulnrichment

Updated: 2025-02-18T14:07:16.908Z

NVD

Status : Received

Published: 2025-02-18T14:15:28.513

Modified: 2025-02-18T14:15:28.513

Link: CVE-2025-1269

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-1269", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "state": "PUBLISHED", "assignerShortName": "TR-CERT", "dateReserved": "2025-02-13T08:05:35.858Z", "datePublished": "2025-02-18T13:48:29.384Z", "dateUpdated": "2025-02-20T11:20:46.686Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Liman MYS", "vendor": "HAVELSAN", "versions": [{"lessThan": "2.1.1 - 1010", "status": "affected", "version": "0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Yagiz BILGILI"}, {"lang": "en", "type": "sponsor", "value": "Privia Security"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing.<p>This issue affects Liman MYS: before 2.1.1 - 1010.</p>"}], "value": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing.This issue affects Liman MYS: before 2.1.1 - 1010."}], "impacts": [{"capecId": "CAPEC-178", "descriptions": [{"lang": "en", "value": "CAPEC-178 Cross-Site Flashing"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:L", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-601", "description": "CWE-601 URL Redirection to Untrusted Site ('Open Redirect')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2025-02-20T11:20:46.686Z"}, "references": [{"url": "https://github.com/limanmys/core/releases/tag/release.master.1010"}, {"url": "https://www.usom.gov.tr/bildirim/tr-25-0038"}], "source": {"advisory": "TR-25-0038", "defect": ["TR-25-0038"], "discovery": "UNKNOWN"}, "title": "Open Redirect in HAVELSAN's Open Source Project Liman MYS", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-02-18T14:07:12.413787Z", "id": "CVE-2025-1269", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-18T14:07:20.022Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-1269", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-02-18T14:07:12.413787Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-18T14:07:16.908Z"}}], "cna": {"title": "Open Redirect in HAVELSAN's Open Source Project Liman MYS", "source": {"defect": ["TR-25-0038"], "advisory": "TR-25-0038", "discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Yagiz BILGILI"}, {"lang": "en", "type": "sponsor", "value": "Privia Security"}], "impacts": [{"capecId": "CAPEC-178", "descriptions": [{"lang": "en", "value": "CAPEC-178 Cross-Site Flashing"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "HAVELSAN", "product": "Liman MYS", "versions": [{"status": "affected", "version": "0", "lessThan": "2.1.1 - 1010", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/limanmys/core/releases/tag/release.master.1010"}, {"url": "https://www.usom.gov.tr/bildirim/tr-25-0038"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing.This issue affects Liman MYS: before 2.1.1 - 1010.", "supportingMedia": [{"type": "text/html", "value": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing.<p>This issue affects Liman MYS: before 2.1.1 - 1010.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-601", "description": "CWE-601 URL Redirection to Untrusted Site ('Open Redirect')"}]}], "providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2025-02-20T11:20:46.686Z"}}}, "cveMetadata": {"cveId": "CVE-2025-1269", "state": "PUBLISHED", "dateUpdated": "2025-02-20T11:20:46.686Z", "dateReserved": "2025-02-13T08:05:35.858Z", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "datePublished": "2025-02-18T13:48:29.384Z", "assignerShortName": "TR-CERT"}, "dataVersion": "5.1"}