Skip to content
OpenAdvisories
High · 8.8 CVE-2025-15025 EUVD-2025-209843GHSA-hjg6-2c9h-3rgp

IDOR in Yordam Informatics' Library Automation System

Published May 14, 2026 · Updated May 14, 2026 · Assigned by TR-CERT

Description

Authorization bypass through User-Controlled key vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Exploitation of Trusted Identifiers.

This issue affects Library Automation System: from v.21.6 before v.22.1.

Affected products

VendorProductAffectedFixed
Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Library Automation System v.21.6 – < v.22.1 v.22.1

References