CVE-2026-13724

Full vulnerability record from the local CVENow database.

Description

Client-Side Enforcement of Server-Side Security vulnerability in Gobito Informatics Technologies Engineering Industry and Trade Ltd. Co. Corporate Training Management System allows Input Data Manipulation. This issue affects Corporate Training Management System: before dd1a9df64.

Severity

MEDIUM

CVSS score

4.3 (v3.1)

Vulnerability status

Deferred

Source identifier

[email protected]

Published

2026-07-20 16:16:55.190000

Last modified

2026-10-24 20:10:00.137000

View original CVE JSON

{
  "id": "CVE-2026-13724",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-20T16:16:55.190",
  "lastModified": "2026-10-24T20:10:00.137",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Client-Side Enforcement of Server-Side Security vulnerability in Gobito Informatics Technologies Engineering Industry and Trade Ltd. Co. Corporate Training Management System allows Input Data Manipulation.\n\nThis issue affects Corporate Training Management System: before dd1a9df64."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de seguridad del lado del servidor por imposición del lado del cliente en el Sistema de Gestión de Capacitación Corporativa de Gobito Informatics Technologies Engineering Industry and Trade Ltd. Co. permite la manipulación de datos de entrada.\n\nEste problema afecta al Sistema de Gestión de Capacitación Corporativa: antes de dd1a9df64."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Gobito Informatics Technologies Engineering Industry and Trade Ltd. Co.",
          "product": "Corporate Training Management System",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThan": "dd1a9df64",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-21T13:40:06.627686Z",
          "id": "CVE-2026-13724",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-602"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0582",
      "source": "[email protected]"
    }
  ]
}