This vulnerability (CVE-2024-9142) affects Olgu Computer Systems e-Belediye versions prior to 2.0.642. It is categorized under CWE-73 (External Control of File Name or Path) and CWE-732 (Incorrect Permission Assignment for Critical Resource). The issue allows an attacker with low privileges to manipulate web input that is used in file system calls, potentially leading to unauthorized file access or modification. The CVSS 4.0 vector indicates network attack vector with no user interaction required, but low privileges needed, and very high impact on confidentiality, integrity, availability, and security requirements. No patch or official fix has been published yet.

Successful exploitation could allow an attacker to manipulate file paths or names used by the application, potentially leading to unauthorized access, modification, or deletion of files. This could compromise the confidentiality, integrity, and availability of the system. Given the critical CVSS score of 9.4, the impact is severe. However, no known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application to trusted users only and monitor for suspicious activity related to file system operations. Avoid exposing the application to untrusted networks if possible.