CVE-2025-1928 describes a critical Improper Restriction of Excessive Authentication Attempts vulnerability in Restajet Information Technologies Inc.'s Online Food Delivery System, affecting all versions through December 19, 2025. This flaw allows for Password Recovery Exploitation, enabling attackers to bypass authentication mechanisms. With a CVSS score of 9.1 (CRITICAL), the vulnerability is network-exploitable with low attack complexity, requiring no user interaction or privileges, and can lead to high confidentiality and integrity impacts. There is currently no evidence of active exploitation, nor are there public exploit codes like Metasploit or ExploitDB modules available, though it has garnered significant community discussion with 10 mentions.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:restajet:online_food_delivery_system:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.