Skip to content
OpenAdvisories
High · 7.5 CVE-2025-5261 EUVD-2025-25270GHSA-9pjc-wjhh-78c6

IDOR in PozitifIK's Pik Online

Published Aug 20, 2025 · Updated Jun 5, 2026 · Assigned by TR-CERT

Description

Authorization Bypass Through User-Controlled Key vulnerability in Pik Online Yazılım Çözümleri A.Ş. Pik Online allows Exploitation of Trusted Identifiers.

This issue affects Pik Online: before 3.1.5.

Affected products

VendorProductAffectedFixed
Pik Online Yazılım Çözümleri A.Ş. Pik Online < 3.1.5 3.1.5

References