VULNERABILITY INTELLIGENCE
CVE-2025-15024
CVSS score8.8 HIGH
EPSS probability0.25%
CISA KEVNot currently listed
Published2026-05-14
Last modified2026-10-07
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Improper Control of Generation of Code ('Code Injection') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Remote Code Inclusion. This issue affects Library Automation System: from v.19.5 before v.22.1.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')