CVE-2025-15024 — RCE in Yordam Informatics' Library Automation System

CVE-2025-15024

RCE in Yordam Informatics' Library Automation System PUBLISHED

Description (CNA)

Improper Control of Generation of Code ('Code Injection') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Remote Code Inclusion. This issue affects Library Automation System: from v.19.5 before v.22.1.

Affected (CNA)

Vendor / product	Versions
Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. / Library Automation System	affected v.19.5 before v.22.1

CWE

CWE-94

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0240

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.