CVE-2025-0421

Full vulnerability record from the local CVENow database.

Description

Improper Restriction of Rendered UI Layers or Frames vulnerability in Shopside Software Technologies Inc. Shopside allows iFrame Overlay. This issue affects Shopside: through 05022025.

Severity

MEDIUM

CVSS score

4.7 (v3.1)

Vulnerability status

Deferred

Source identifier

[email protected]

Published

2025-11-19 14:15:57.943000

Last modified

2026-10-19 13:10:00.110000

View original CVE JSON

{
  "id": "CVE-2025-0421",
  "sourceIdentifier": "[email protected]",
  "published": "2025-11-19T14:15:57.943",
  "lastModified": "2026-10-19T13:10:00.110",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Restriction of Rendered UI Layers or Frames vulnerability in Shopside Software Technologies Inc. Shopside allows iFrame Overlay.\n\nThis issue affects Shopside: through 05022025."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de Restricción Inadecuada de Capas o Marcos de UI Renderizados en Shopside Software Technologies Inc. Shopside permite la superposición de iFrame. Este problema afecta a Shopside: hasta el 05/02/2025."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Shopside Software Technologies Inc.",
          "product": "Shopside",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThanOrEqual": "05022025",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
          "baseScore": 4.7,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "HIGH",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "availabilityImpact": "LOW"
        },
        "exploitabilityScore": 1.2,
        "impactScore": 3.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-11-19T14:06:33.495330Z",
          "id": "CVE-2025-0421",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-1021"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0402",
      "source": "[email protected]"
    },
    {
      "url": "https://www.usom.gov.tr/bildirim/tr-25-0402",
      "source": "[email protected]"
    }
  ]
}