What’s Vulnerable › Vulnerabilities

CVE-2025-4378: Hardcoded Credentials in Ataturk University's ATA-AOF Mobile Application

• Severity: critical (CVSS 10.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-24 · updated 2026-06-17
• Weakness: CWE-319

Description

Cleartext Transmission of Sensitive Information, Use of Hard-coded Credentials vulnerability in Ataturk University ATA-AOF Mobile Application allows Authentication Abuse, Authentication Bypass. This issue affects ATA-AOF Mobile Application: before 20.06.2025.

Affected products

• Ataturk University ATA-AOF Mobile Application: before 20.06.2025 — fixed in 20.06.2025

How to fix

Upgrade to a fixed version: Ataturk University ATA-AOF Mobile Application 20.06.2025. Check the vendor advisory for mitigations.

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0135
• https://www.usom.gov.tr/bildirim/tr-25-0135

Get alerted when CVE-2025-4378 or the next vulnerability affects your stack