The Identity and Directory Management System developed by Çekino Bilgi Teknolojileri before version 2.1.25 has an unauthenticated Path traversal vulnerability. This has been fixed in the version 2.1.25
https://www.usom.gov.tr/bildirim/tr-22-0636
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0636