CVEvulnerability

CVE-2025-15066

6.9 MEDIUM Published 2025-12-29 Modified 2026-10-07 Official page ↗
Status
Deferred
Published
2025-12-29
Last modified
2026-10-07
Assigner
09832df1-09c1-45b4-8a85-16c601d30feb
CVSS 4.0 (09832df1-09c1-45b4-8a85-16c601d30feb)
6.9 MEDIUM — CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 (09832df1-09c1-45b4-8a85-16c601d30feb)
6.2 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-22, CWE-862

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Missing Authorization vulnerability in Innorix WP allows Path Traversal.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed (ex: innorix/exam)

Related

Weakness · CWE (2)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
  • CWE-862 Missing Authorization weakness

References