CVE-2025-1927

7.1 HIGH

Cross-Site Request Forgery (CSRF) vulnerability in Restajet Information Technologies Inc

Published: 2025-12-19 · Last updated: 2026-06-06

Severity and scoring

CVSS: 7.1 HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
CWE: CWE-352

Affected products

Vendor	Product
restajet	online_food_delivery_system

Description

Cross-Site Request Forgery (CSRF) vulnerability in Restajet Information Technologies Inc. Online Food Delivery System allows Cross Site Request Forgery. This issue affects Online Food Delivery System: through 19122025. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Source: NVD

References

Related CVEs

Same vendor

CVE-2025-1928 — Improper Restriction of Excessive Authentication Attempts vulnerability in Restajet Information Technologies Inc (9.1 CRITICAL)
CVE-2025-1885 — URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Restajet Information Technologies Inc (5.4 MEDIUM)

Same CWE

CVE-2026-49396 — Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool (7.1 HIGH)
CVE-2026-54359 — MISP contains an insecure default configuration in which the Security.check_sec_fetch_site_header control is disabled
CVE-2026-48612 — Improper state verification in the OAuth implementation could allow an attacker to manipulate the authentication flow and cause a victim’... (8.0 HIGH)
CVE-2022-47150 — Cross-Site request forgery (CSRF) vulnerability in weDevs WooCommerce Conversion Tracking allows Cross Site Request Forgery (4.3 MEDIUM)
CVE-2022-44630 — Cross-Site request forgery (CSRF) vulnerability in YITH YITH WooCommerce Product Slider Carousel allows Cross Site Request Forgery (4.6 MEDIUM)