Uyap Document Editor
Monthly
Unsafe deserialization in the UYAP Document Editor before version 5.4.20 allows an attacker to inject objects into the application through a crafted document, resulting in code execution with the privileges of the editor process (CVSS 3.1 base 8.8, AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, CWE-502). Exploitation is unauthenticated and network-reachable with low complexity, but requires the victim to open or process an attacker-supplied malicious document (UI:R), which is the principal limiting factor; no public exploit has been identified at time of analysis, and the product is deployed specifically within the Turkish judicial (UYAP) user base, narrowing the realistic target set. Successful exploitation yields high confidentiality, integrity, and availability impact within the affected user's scope.
OS command injection in the Ministry of Justice General Directorate of Information Technology's UYAP Document Editor before version 5.4.20 allows an attacker to execute arbitrary operating-system commands on a victim's machine when a crafted document is opened in the application. The issue is local in nature (AV:L) and requires user interaction (UI:R) - the victim must open a malicious file - but no authentication or privileges are needed (PR:N), and successful exploitation yields high confidentiality, integrity, and availability impact, giving a base score of 7.8 (HIGH) on the CVSS 3.1 vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The flaw was reported by TR-CERT; no public exploit code has been identified and the issue is not listed in CISA KEV, so the practical risk is driven by phishing-style delivery of weaponized-looking documents rather than by remote scanning or automated mass exploitation.
XML External Entity (XXE) injection in UYAP Document Editor versions 4.5.17 through 5.4.17 allows a local attacker to exfiltrate sensitive file system contents by tricking a user into opening a specially crafted document. The vulnerability enables serialized data external linking via uncontrolled XML external entity resolution, resulting in high confidentiality impact with scope change to the underlying operating system. Reported by TR-CERT; no public exploit code or CISA KEV listing identified at time of analysis.
Unsafe deserialization in the UYAP Document Editor before version 5.4.20 allows an attacker to inject objects into the application through a crafted document, resulting in code execution with the privileges of the editor process (CVSS 3.1 base 8.8, AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, CWE-502). Exploitation is unauthenticated and network-reachable with low complexity, but requires the victim to open or process an attacker-supplied malicious document (UI:R), which is the principal limiting factor; no public exploit has been identified at time of analysis, and the product is deployed specifically within the Turkish judicial (UYAP) user base, narrowing the realistic target set. Successful exploitation yields high confidentiality, integrity, and availability impact within the affected user's scope.
OS command injection in the Ministry of Justice General Directorate of Information Technology's UYAP Document Editor before version 5.4.20 allows an attacker to execute arbitrary operating-system commands on a victim's machine when a crafted document is opened in the application. The issue is local in nature (AV:L) and requires user interaction (UI:R) - the victim must open a malicious file - but no authentication or privileges are needed (PR:N), and successful exploitation yields high confidentiality, integrity, and availability impact, giving a base score of 7.8 (HIGH) on the CVSS 3.1 vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The flaw was reported by TR-CERT; no public exploit code has been identified and the issue is not listed in CISA KEV, so the practical risk is driven by phishing-style delivery of weaponized-looking documents rather than by remote scanning or automated mass exploitation.
XML External Entity (XXE) injection in UYAP Document Editor versions 4.5.17 through 5.4.17 allows a local attacker to exfiltrate sensitive file system contents by tricking a user into opening a specially crafted document. The vulnerability enables serialized data external linking via uncontrolled XML external entity resolution, resulting in high confidentiality impact with scope change to the underlying operating system. Reported by TR-CERT; no public exploit code or CISA KEV listing identified at time of analysis.