Authorization Bypass Vulnerability in DijiDemi by Im Park Information Technology
CVE-2025-13125
4.3MEDIUM
Key Information:
- Vendor
Im Park Information Technology, Electronics, Press, Publishing And Advertising, Education Ltd. Co.
- Status
- Vendor
- CVE Published:
- 10 December 2025
What is CVE-2025-13125?
An authorization bypass vulnerability has been identified in DijiDemi developed by Im Park Information Technology, allowing attackers to exploit trusted identifiers. The flaw enables unauthorized access to restricted functionalities by manipulating user-controlled keys, potentially leading to data exposure or further exploitation. It is crucial for users to update to the latest version before the specified date to mitigate risks associated with this vulnerability.
Affected Version(s)
DijiDemi 0 <= 28.11.2025