IDOR in Im Park’s DijiDemi_CVE-2025-13125

4.3 / 10

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Authorization Bypass Through User-Controlled Key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi allows Exploitation of Trusted Identifiers.This issue affects DijiDemi: through 28.11.2025.

Basic Information

ID CVE-2025-13125

Source TR-CERT

Published Dec 10, 2025 at 14:11

Modified Dec 10, 2025 at 14:34

Affected Product

Vendor Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co.

Product DijiDemi

Affected Versions Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi 0

CWE Classification

CWE-639

References

www.usom.gov.tr /bildirim/tr-25-0442

{
    "lastseen": "",
    "description": "Authorization Bypass Through User-Controlled Key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi allows Exploitation of Trusted Identifiers.This issue affects DijiDemi: through 28.11.2025.",
    "published": "2025-12-10T14:11:09.650Z",
    "modified": "2025-12-10T14:34:33.254Z",
    "type": "cve",
    "title": "IDOR in Im Park's DijiDemi",
    "source": "TR-CERT",
    "references": "https://www.usom.gov.tr/bildirim/tr-25-0442",
    "id": "CVE-2025-13125",
    "bulletinFamily": "",
    "cwe": [
        "CWE-639"
    ],
    "cvelist": null,
    "sourceData": "Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi 0",
    "sourceHref": "",
    "cvss": {
        "score": 4.3,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "DijiDemi",
    "version": "0",
    "vendor": "Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co.",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}