{"id":"CVE-2025-14018","aliases":["EUVD-2025-204713","GHSA-jffx-85pq-vrr5"],"status":"published","title":"Unquoted Service Path in NetBT Consultancy's e-Fatura","description":"Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura allows Leveraging/Manipulating Configuration File Search Paths, Redirect Access to Libraries.\n\nThis issue affects e-Fatura: before 1.2.15.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00444,"percentile":0.39086,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-428"],"published":"2025-12-22T13:46:12Z","modified":"2026-10-14T19:10:00Z","exploits":[{"source":"exploitdb","id":"EDB-52509","title":"NetBT e-Fatura - Privilege Escalation","type":"local","platform":"multiple","date":"2026-04-10","url":"https://www.exploit-db.com/exploits/52509"},{"source":"pocgithub","id":"kaleth4/CVE-2025-14018","title":"kaleth4/CVE-2025-14018","date":"2026-04-11","url":"https://github.com/kaleth4/CVE-2025-14018"}],"products":[{"vendor":"netbt consulting services inc.","product":"e-fatura"}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-25-0474","tags":["government-resource","broken-link"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0474","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14018"},{"url":"https://github.com/advisories/GHSA-jffx-85pq-vrr5"}],"sources":{"cve":[{"id":"CVE-2025-14018","title":"Unquoted Service Path in NetBT Consultancy's e-Fatura","description":"Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura allows Leveraging/Manipulating Configuration File Search Paths, Redirect Access to Libraries.\n\nThis issue affects e-Fatura: before 1.2.15.","status":"published","published":"2025-12-22T13:46:12.154Z","modified":"2026-06-04T06:29:43.289Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-428"],"updated_at":"2026-11-02T14:32:28.250136Z"}],"euvd":[{"id":"EUVD-2025-204713","description":"Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura allows Leveraging/Manipulating Configuration File Search Paths, Redirect Access to Libraries.\n\nThis issue affects e-Fatura: before 1.2.15.","status":"published","published":"2025-12-22T13:46:12Z","modified":"2026-06-04T06:29:43Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T18:20:53.780241Z"}],"ghsa":[{"id":"GHSA-jffx-85pq-vrr5","title":"Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura allows...","description":"Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura allows Leveraging/Manipulating Configuration File Search Paths, Redirect Access to Libraries.This issue affects e-Fatura: before 1.2.15.","status":"published","published":"2025-12-22T15:30:21Z","modified":"2026-06-04T09:31:38Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high"}],"cwes":["CWE-428"],"updated_at":"2026-11-02T15:08:32.060893Z"}],"nvd":[{"id":"CVE-2025-14018","description":"Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura allows Leveraging/Manipulating Configuration File Search Paths, Redirect Access to Libraries.\n\nThis issue affects e-Fatura: before 1.2.15.","status":"published","published":"2025-12-22T14:15:59.54Z","modified":"2026-10-14T19:10:00.297Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-428"],"updated_at":"2026-11-02T14:11:52.309391Z"}]}}