This vulnerability is classified as CWE-918 (Server-Side Request Forgery) in the Revenue Administration Türkiye's E-Signature software. It affects version 2.4.4.0 and potentially other versions before 2.5.1.0. SSRF vulnerabilities allow attackers to make the server perform unauthorized requests, potentially leading to information disclosure or other impacts depending on the server's network environment. The CVSS v3.1 vector indicates the attack can be performed remotely over the network with low attack complexity, no privileges required, but user interaction is needed. The impact includes low confidentiality and integrity loss, with no availability impact. No vendor advisory or patch information is currently provided.

An attacker could exploit this SSRF vulnerability to cause the E-Signature server to make unauthorized requests to internal or external systems. This may lead to limited confidentiality and integrity impacts, such as accessing internal resources or manipulating data accessible via the forged requests. There is no indication of availability impact or privilege escalation. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific temporary mitigations or workarounds are provided in the available data.