{"id":"CVE-2025-15066","title":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Missing Authorization vulnerability in Innorix WP allows Path Traversal.This issue affects Innorix WP from All versions If the \"exam\" directory exists under …","summary":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Missing Authorization vulnerability in Innorix WP allows Path Traversal.This issue affects Innorix WP from All versions If the \"exam\" directory exists under …","severity":"medium","cvss":6.2,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-22","CWE-862"],"published":"2025-12-29","updated":"2026-10-07","sourceUpdated":"2026-10-07T12:10:00.170","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-15066","references":[{"url":"https://www.gnit.co.kr/software/innorix_product.html","label":"09832df1-09c1-45b4-8a85-16c601d30feb"},{"url":"https://www.innorix.com/","label":"09832df1-09c1-45b4-8a85-16c601d30feb"}],"tags":["nvd"],"epss":0.00165,"epssPercentile":0.05254,"ingestedAt":"2026-10-07T12:29:01.322Z","slug":"CVE-2025-15066","body":"## Overview\n\nImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Missing Authorization vulnerability in Innorix WP allows Path Traversal.This issue affects Innorix WP from All versions If the \"exam\" directory exists under the directory where the product is installed (ex: innorix/exam)\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":34,"depthScoreParts":{"impact":34.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}