Inrove Software BiEticaret CMS Execution After Redirect Vulnerability Allowing Authentication Bypass and HTTP Response Splitting

A vulnerability allowing execution after redirect (EAR), missing authentication for critical functions, has been identified in Inrove Software and Internet Services BiEticaret CMS. This vulnerability allows authentication bypass and HTTP response splitting. It affects BiEticaret CMS versions 2.1.13 through 19022026.

Impact

Exploitation of this vulnerability could lead to authentication bypass, allowing unauthorized access to critical functions, and could also be used to manipulate HTTP responses, potentially leading to further attacks.

Remediation

The vendor has not addressed this vulnerability. Users are advised to consider switching to a different application.