CVE-2025-1927

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

Cross-Site Request Forgery (CSRF) vulnerability in Restajet Information Technologies Inc. Online Food Delivery System allows Cross Site Request Forgery.

This issue affects Online Food Delivery System: through 19122025. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Weakness enumeration

CWE-352

Affected software

Vendor	Product	Versions
Restajet Information Technologies Inc.	Online Food Delivery System	<= 19122025

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0469
https://www.usom.gov.tr/bildirim/tr-25-0469Third Party Advisory

Timeline

Published: Dec 19, 2025
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2025

CVE-2025-19289.1Improper Restriction of Excessive Authentication Attempts vulnerability in Restajet Information Technologies Inc. Online Food Delivery Syste CVE-2025-19297.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Risk Yazılım Teknolojileri Ltd. Şti. R CVE-2025-19308.8On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the Browser process. Th CVE-2025-19317.5It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potentially exploitable cra CVE-2025-19328.1An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 1 CVE-2025-19337.6On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory. This can potentially cause them to CVE-2025-19346.5It was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering garbage collection whe CVE-2025-19354.3A web page could trick a user into setting that site as the default handler for a custom URL protocol. This vulnerability was fixed in Firef CVE-2025-19367.3jar: URLs retrieve local file content packaged in a ZIP archive. The null and everything after it was ignored when retrieving the content fr CVE-2025-19377.5Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs CVE-2025-19386.5Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of CVE-2025-19393.9Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to tri