Is CVE-2025-1885 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-1885 being exploited in the wild.

How severe is CVE-2025-1885?

Medium severity, with a CVSS score of 5.4, published 19 December 2025.

Which products and versions are affected?

Restajet Information Technologies Inc. Online Food Delivery System through 19122025.

Is there a fix for CVE-2025-1885?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2025-1885 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2025-1885?

Check whether you run Restajet Online Food Delivery System. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-1885: Restajet Online Food Delivery System Open Redirect

CVE-2025-1885 · Severity: medium · CVSS 5.4 · Published 2025-12-19

The Restajet Online Food Delivery System contains a security flaw that allows attackers to redirect users to malicious websites. This type of vulnerability is commonly used in phishing campaigns to trick customers or staff into providing login credentials or downloading malware by making a malicious link appear to come from a trusted domain. Because the vendor has not responded to disclosure attempts, a fix may not be available.

Technologies: Restajet Online Food Delivery System. Vendors: Restajet.

Quick answers

Is CVE-2025-1885 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-1885 being exploited in the wild.
How severe is CVE-2025-1885?: Medium severity, with a CVSS score of 5.4, published 19 December 2025.
Which products and versions are affected?: Restajet Information Technologies Inc. Online Food Delivery System through 19122025.
Is there a fix for CVE-2025-1885?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-1885 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2025-1885?: Check whether you run Restajet Online Food Delivery System. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An open redirect vulnerability (CWE-601) exists in the Restajet Online Food Delivery System through version 19122025. The application fails to properly validate user-supplied input used in redirection targets, allowing a remote attacker with low privileges to craft a URL that redirects victims to an arbitrary external domain. Exploitation requires user interaction, typically via a phishing link. Successful exploitation can facilitate credential harvesting or the delivery of malicious payloads under the guise of the trusted application's domain. As of the advisory date, the vendor has not responded to reports, and no patch has been confirmed.

Affected products

Restajet Information Technologies Inc. Online Food Delivery System through 19122025

Timeline

2025-12-19: disclosed: Initial disclosure by TR-CERT (USOM)
2025-12-19: advisory: NVD publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.