CVE-2025-15066CWE-22CWE-862path-traversalbroken-access-control

CVE-2025-15066

Medium · published December 29, 2025

CVSS v3.1
6.2
EPSS
0%
Percentile
5.5
In the wild
Unconfirmed
What it is

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Missing Authorization vulnerability in Innorix WP allows Path Traversal.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed (ex: innorix/exam)

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00165 · 5.5th percentile
Weaknesses
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'); CWE-862 · Missing Authorization
Published
2025-12-29T06:15Z
References (2)
https://www.gnit.co.kr/software/innorix_product.html · 09832df1-09c1-45b4-8a85-16c601d30febhttps://www.innorix.com/ · 09832df1-09c1-45b4-8a85-16c601d30feb
EPSS history
Timeline
  • 29 DEC 00:48Z
    Arbitrary File Download through Path Traversal in Innorix WP
    cvelistv5