CVE-2025-8350 — Authentication Bypass with Redirect in BiEticaret Software's BiEticaret CMS

CVE-2025-8350

Authentication Bypass with Redirect in BiEticaret Software's BiEticaret CMS PUBLISHED

Description (CNA)

Execution After Redirect (EAR), Missing Authentication for Critical Function vulnerability in Inrove Software and Internet Services BiEticaret CMS allows Authentication Bypass, HTTP Response Splitting. This issue affects BiEticaret CMS: from 2.1.13 through 19022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected (CNA)

Vendor / product	Versions
Inrove Software and Internet Services / BiEticaret CMS	affected 2.1.13 through 19022026

CWE

CWE-698, CWE-306

References

https://www.usom.gov.tr/bildirim/tr-26-0077
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0077

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.