QSearchQSearch

CVE-2022-2265

7.5 HIGH

The Identity and Directory Management System developed by Çekino Bilgi Teknolojileri before version 2.1.25 has an unauthenticated Path tr...

Published: 2022-09-21 · Last updated: 2026-05-20

Severity and scoring

CVSS
7.5 HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE
CWE-22, CWE-35

Affected products

VendorProduct
identity_and_directory_management_system_projectidentity_and_directory_management_system

Description

The Identity and Directory Management System developed by Çekino Bilgi Teknolojileri before version 2.1.25 has an unauthenticated Path traversal vulnerability. This has been fixed in the version 2.1.25

Source: NVD

References

Related CVEs

Same CWE

  • CVE-2026-48777 — FileBrowser Quantum is a free, self-hosted, web-based file manager
  • CVE-2026-8442 — The WP Review Slider Pro plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 12.6.8 (8.1 HIGH)
  • CVE-2026-52703 — Unauthenticated Path Traversal in FastDup <= 2.7.2 versions (9.6 CRITICAL)
  • CVE-2026-49766 — Subscriber Arbitrary File Deletion in WP User Manager <= 2.9.16 versions (9.9 CRITICAL)
  • CVE-2026-49112 — Unauthenticated Path Traversal in Shared Files <= 1.7.64 versions (7.5 HIGH)