This vulnerability is an IDOR (Insecure Direct Object Reference) that allows an attacker to override a user‑controlled key used by ABIS Technology Ltd. Co.’s BAPSİS system. By providing a crafted identifier, an attacker can obtain or manipulate trusted identifiers that are normally protected, potentially leading to unauthorized access to sensitive information or privileged functionality. The weakness aligns with CWE‑639, which denotes an authorization bypass through user‑controlled data.

ABIS Technology Ltd. Co. BAPSİS prior to version 202604152042 is affected. No other vendors, products, or version ranges are specified in the CVE data.

The CVSS score of 8.8 classifies this flaw as High severity. No EPSS score is available, so the exploitation probability is unknown, but the lack of a KEV listing does not imply low risk. The likely attack vector is the application’s interface where users submit identifiers; an attacker who can supply the key can exploit the authorization bypass. If an exploitable path exists, it may allow unprivileged users to read or modify data that should be restricted to authenticated accounts.