CVE-2025-15024 - Vulnerability Analysis

Overview

Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System from v.19.5 before v.22.1 contains a file inclusion vulnerability caused by improper control of code generation, letting remote attackers include and execute arbitrary code, exploit requires network access.

Severity & Score

Impact

Remote attackers can include and execute arbitrary code, potentially leading to full system compromise.

Mitigation

Upgrade to version 22.1 or later.

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0240

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner