What is the CVSS score of CVE-2025-1395?

CVE-2025-1395 has a CVSS 3.1 base score of 8.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N. EPSS exploitation probability: 0.0%.

Which versions of Codriapp Innovation are affected by CVE-2025-1395?

CVE-2025-1395 affects HeyGarson applications and exposes sensitive information through error messages, potentially allowing attackers to gather intelligence for further attacks.

How to fix or mitigate CVE-2025-1395?

Within 24 hours: Inventory all HeyGarson deployments and assess exposure; enable error message suppression in production environments and review access logs for exploitation attempts. Within 7 days: Implement network segmentation to limit HeyGarson application exposure; deploy WAF rules to filter verbose error responses; establish daily monitoring for suspicious reconnaissance activity. Within 30 days: Contact vendor for patch availability timeline; evaluate alternative solutions or upgrade paths; conduct security awareness training on information disclosure risks.

Codriapp Innovation CVE-2025-1395

HIGH

Error Message Information Leak (CWE-209)

2026-01-30 iletisim@usom.gov.tr

Information Disclosure

8.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.2 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:00 vuln.today

CVE Published

Jan 30, 2026 - 09:15 nvd

HIGH 8.2

DescriptionCVE.org

Generation of Error Message Containing Sensitive Information vulnerability in Codriapp Innovation and Software Technologies Inc. HeyGarson allows Fuzzing for application mapping.This issue affects HeyGarson: through 30012026.

NOTE: The vendor was contacted several times to verifying fixing process but did not respond in any way.

AnalysisAI

Codriapp Innovation and Software Technologies Inc. HeyGarson is affected by error message information leak (CVSS 8.2).

Technical ContextAI

This vulnerability (CWE-209: Error Message Information Leak) affects Codriapp Innovation and Software Technologies Inc. HeyGarson. Generation of Error Message Containing Sensitive Information vulnerability in Codriapp Innovation and Software Technologies Inc. HeyGarson allows Fuzzing for application mapping.This issue affects HeyGarson: through 30012026.

NOTE: The vendor was contacted several times to verifying fixing process but did not respond in any way.