CVE-2025-15024

High

Published: 14/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Yordam Library Automation System has a code injection vulnerability that allows remote code inclusion. This issue affects versions from 19.5 to before 22.1.

Risk Assessment

An attacker could exploit this vulnerability to execute malicious code on the server, potentially leading to data loss or system takeover.

Recommendation

It is recommended to upgrade the Library Automation System to version 22.1 or later to mitigate this vulnerability.

Other vulnerabilities in Yordam Library Automation System

CVE-2025-15023High
The vulnerability related to incorrect authorization in the Yordam Library Automation System allows exploiting incorrectly configured access control security levels. It affects versions from 19.5 to before 22.1.

Original NVD description (English source)

Improper Control of Generation of Code ('Code Injection') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Remote Code Inclusion. This issue affects Library Automation System: from v.19.5 before v.22.1.