CVE-2025-15066

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Missing Authorization vulnerability in Innorix WP allows Path Traversal.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed (ex: innorix/exam)

Score

CVSS 4.0 6.9 Medium

Status

Deferred - 09832df1-09c1-45b4-8a85-16c601d30feb

Published

2025-12-29

Last modified

2026-10-07

Weaknesses

CWE-22, CWE-862

Affected products

• Innorix Wp (Innorix)

References

• https://www.innorix.com/
• https://www.gnit.co.kr/software/innorix_product.html