CVE-2022-2265

HIGH 7.5CVE-2022-2265 · Published 21/09/2022 · updated 17/06/2026

In short

CVE-2022-2265 is a HIGH (CVSS 7.5) vulnerability affecting identity and directory management system (identity and directory management system project).
Chance of exploitation in the next 30 days (EPSS): 0.87%, higher than 59.2% of all vulnerabilities.
Fix: update to 2.1.25 or later.

Package	Affected versions	Patched versions
identity and directory management system identity_and_directory_management_system_project	`< 2.1.25`	`2.1.25`

Description

The Identity and Directory Management System developed by Çekino Bilgi Teknolojileri before version 2.1.25 has an unauthenticated Path traversal vulnerability. This has been fixed in the version 2.1.25

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0636
usom.gov.tr/bildirim/tr-22-0636 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free