CVE-2025-1885

5.4 MEDIUM

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Restajet Information Technologies Inc

Published: 2025-12-19 · Last updated: 2026-06-06

Severity and scoring

CVSS: 5.4 MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L
CWE: CWE-601

Affected products

Vendor	Product
restajet	online_food_delivery_system

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Restajet Information Technologies Inc. Online Food Delivery System allows Phishing, Forceful Browsing. This issue affects Online Food Delivery System: through 19122025. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Source: NVD

References

Related CVEs

Same vendor

CVE-2025-1928 — Improper Restriction of Excessive Authentication Attempts vulnerability in Restajet Information Technologies Inc (9.1 CRITICAL)
CVE-2025-1927 — Cross-Site Request Forgery (CSRF) vulnerability in Restajet Information Technologies Inc (7.1 HIGH)

Same CWE

CVE-2026-53523 — Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool (6.8 MEDIUM)
CVE-2026-50089 — The Aqara IAM/SSO Gateway (gw-builder.aqara.com) provides an open redirect, which is an instance of "CWE-601: URL Redirection to Untruste... (6.1 MEDIUM)
CVE-2026-46616 — Umbraco is an ASP.NET CMS (5.4 MEDIUM)
CVE-2026-48856 — Sensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows Retrieve Embedded Sensitive Data
CVE-2026-45566 — Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers (6.1 MEDIUM)