---
id: CVE-2025-15066
title: >-
  Improper Limitation of a Pathname to a Restricted Directory ('Path
  Traversal'), Missing Authorization vulnerability in Innorix WP allows Path
  Traversal.This issue affects Innorix WP from All versions If the "exam"
  directory exists under …
summary: >-
  Improper Limitation of a Pathname to a Restricted Directory ('Path
  Traversal'), Missing Authorization vulnerability in Innorix WP allows Path
  Traversal.This issue affects Innorix WP from All versions If the "exam"
  directory exists under …
severity: medium
cvss: 6.2
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-22
  - CWE-862
published: '2025-12-29'
updated: '2026-10-07'
sourceUpdated: '2026-10-07T12:10:00.170'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-15066'
references:
  - url: 'https://www.gnit.co.kr/software/innorix_product.html'
    label: 09832df1-09c1-45b4-8a85-16c601d30feb
  - url: 'https://www.innorix.com/'
    label: 09832df1-09c1-45b4-8a85-16c601d30feb
tags:
  - nvd
epss: 0.00165
epssPercentile: 0.05254
ingestedAt: '2026-10-07T12:29:01.322Z'
---

## Overview

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Missing Authorization vulnerability in Innorix WP allows Path Traversal.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed (ex: innorix/exam)

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.