Authentication Bypass with Redirect in BiEticaret Software's BiEticaret CMS
Vulnerability Description
Execution After Redirect (EAR), Missing Authentication for Critical Function vulnerability in Inrove Software and Internet Services BiEticaret CMS allows Authentication Bypass, HTTP Response Splitting. This issue affects BiEticaret CMS: from 2.1.13 through 19022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-8350
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Çetin BİNİCİ
Affected Vendor
Inrove Software and Internet Services
View all reports →