CVE-2025-1269 - Vulnerability Details - OpenCVE

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing. This issue affects Liman MYS: before 2.1.1 - 1010.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact None

Availability Impact Low

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0004.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

No data.

References

Link	Providers
https://github.com/limanmys/core/releases/tag/release.master.1010
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0038
https://www.usom.gov.tr/bildirim/tr-25-0038

History

Sat, 06 Jun 2026 07:30:00 +0000

Type	Values Removed	Values Added
Description	URL Redirection to Untrusted Site ('Open Redirect') vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing.This issue affects Liman MYS: before 2.1.1 - 1010.	URL Redirection to Untrusted Site ('Open Redirect') vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing. This issue affects Liman MYS: before 2.1.1 - 1010.
References		https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0038

Tue, 18 Feb 2025 14:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 18 Feb 2025 14:00:00 +0000

Type	Values Removed	Values Added
Description		URL Redirection to Untrusted Site ('Open Redirect') vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing.This issue affects Liman MYS: before 2.1.1 - 1010.
Title		Open Redirect in HAVELSAN's Open Source Project Liman MYS
Weaknesses		CWE-601
References		https://github.com/limanmys/core/releases/tag/release.master.1010 https://www.usom.gov.tr/bildirim/tr-25-0038
Metrics		cvssV3_1 `{'score': 4.8, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:L'}`

MITRE

Status: PUBLISHED

Assigner: TR-CERT

Published: 2025-02-18T13:48:29.384Z

Updated: 2026-06-06T06:56:01.491Z

Reserved: 2025-02-13T08:05:35.858Z

Link: CVE-2025-1269

Vulnrichment

Updated: 2025-02-18T14:07:16.908Z

NVD

Status : Deferred

Published: 2025-02-18T14:15:28.513

Modified: 2026-06-06T08:16:49.827

Link: CVE-2025-1269

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-1269", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "state": "PUBLISHED", "assignerShortName": "TR-CERT", "dateReserved": "2025-02-13T08:05:35.858Z", "datePublished": "2025-02-18T13:48:29.384Z", "dateUpdated": "2026-06-06T06:56:01.491Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2026-06-06T06:56:01.491Z"}, "title": "Open Redirect in HAVELSAN's Open Source Project Liman MYS", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-601", "description": "CWE-601 URL Redirection to Untrusted Site ('Open Redirect')", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-178", "descriptions": [{"lang": "en", "value": "CAPEC-178 Cross-Site Flashing"}]}], "affected": [{"vendor": "HAVELSAN", "product": "Liman MYS", "versions": [{"status": "affected", "version": "0", "lessThan": "2.1.1 - 1010", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing.\n\nThis issue affects Liman MYS: before 2.1.1 - 1010.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing.<p>This issue affects Liman MYS: before 2.1.1 - 1010.</p>"}]}], "references": [{"url": "https://github.com/limanmys/core/releases/tag/release.master.1010"}, {"url": "https://www.usom.gov.tr/bildirim/tr-25-0038", "tags": ["government-resource", "broken-link"]}, {"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0038", "tags": ["government-resource"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "LOW", "baseSeverity": "MEDIUM", "baseScore": 4.8, "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:L"}}], "credits": [{"lang": "en", "value": "Yagiz BILGILI", "type": "finder"}, {"lang": "en", "value": "Privia Security", "type": "sponsor"}], "source": {"defect": ["TR-25-0038"], "advisory": "TR-25-0038", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-02-18T14:07:12.413787Z", "id": "CVE-2025-1269", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-18T14:07:20.022Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-1269", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-02-18T14:07:12.413787Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-18T14:07:16.908Z"}}], "cna": {"title": "Open Redirect in HAVELSAN's Open Source Project Liman MYS", "source": {"defect": ["TR-25-0038"], "advisory": "TR-25-0038", "discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Yagiz BILGILI"}, {"lang": "en", "type": "sponsor", "value": "Privia Security"}], "impacts": [{"capecId": "CAPEC-178", "descriptions": [{"lang": "en", "value": "CAPEC-178 Cross-Site Flashing"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "HAVELSAN", "product": "Liman MYS", "versions": [{"status": "affected", "version": "0", "lessThan": "2.1.1 - 1010", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/limanmys/core/releases/tag/release.master.1010"}, {"url": "https://www.usom.gov.tr/bildirim/tr-25-0038", "tags": ["government-resource", "broken-link"]}, {"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0038", "tags": ["government-resource"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing.\n\nThis issue affects Liman MYS: before 2.1.1 - 1010.", "supportingMedia": [{"type": "text/html", "value": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing.<p>This issue affects Liman MYS: before 2.1.1 - 1010.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-601", "description": "CWE-601 URL Redirection to Untrusted Site ('Open Redirect')"}]}], "providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2026-06-06T06:56:01.491Z"}}}, "cveMetadata": {"cveId": "CVE-2025-1269", "state": "PUBLISHED", "dateUpdated": "2026-06-06T06:56:01.491Z", "dateReserved": "2025-02-13T08:05:35.858Z", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "datePublished": "2025-02-18T13:48:29.384Z", "assignerShortName": "TR-CERT"}, "dataVersion": "5.2"}