CRLF Injection Vulnerability in DECE Software Geodi
CVE-2025-6175

7.2HIGH

Key Information:

Vendor

Dece Software

Status
Geodi
Vendor
CVE Published:
29 July 2025

What is CVE-2025-6175?

The CRLF Injection vulnerability in DECE Software Geodi allows attackers to manipulate HTTP headers and carry out HTTP Request Splitting. This can lead to significant security concerns, including response splitting and potential redirection of user requests, compromising the integrity of web applications. It affects all versions of Geodi prior to GEODI Setup 9.0.146, making it crucial for users of this software to apply necessary updates and patches to mitigate risks.

Affected Version(s)

Geodi 0

References

https://www.usom.gov.tr/bildirim/tr-25-0182
third-party-advisory

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Serhat Yapici
Republic of TĂĽrkiye Ministry of Trade
.
CVE-2025-6175 : CRLF Injection Vulnerability in DECE Software Geodi