CVE-2025-15066

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Missing Authorization vulnerability in Innorix WP allows Path Traversal.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed (ex: innorix/exam)

CVSS v3 6.2 MEDIUM

6.2^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.5 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.gnit.co.kr/software/innorix_product.html
https://www.innorix.com/

Configurations

No configuration.

History

07 Oct 2026, 12:10

Type	Values Removed	Values Added
Summary		(es) Limitación Incorrecta de un Nombre de Ruta a un Directorio Restringido ('Salto de Ruta'), vulnerabilidad de Autorización Faltante en Innorix WP permite el Salto de Ruta. Este problema afecta a Innorix WP desde Todas las versiones Si el directorio “exam” existe bajo el directorio donde el producto está instalado (ej: innorix/exam)

Information

Published : 2025-12-29 01:15

Updated : 2026-10-07 12:10

NVD link : CVE-2025-15066

Mitre link : CVE-2025-15066

CVE.ORG link : CVE-2025-15066

JSON object : View

Products Affected

No product.

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-862

Missing Authorization

{"id": "CVE-2025-15066", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-15066", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-29T17:31:49.730389Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "09832df1-09c1-45b4-8a85-16c601d30feb", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.5}], "cvssMetricV40": [{"type": "Secondary", "source": "09832df1-09c1-45b4-8a85-16c601d30feb", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.9, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "09832df1-09c1-45b4-8a85-16c601d30feb", "affectedData": [{"vendor": "Innorix", "product": "Innorix WP", "versions": [{"status": "unknown", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}]}], "published": "2025-12-29T01:15:52.990", "references": [{"url": "https://www.gnit.co.kr/software/innorix_product.html", "source": "09832df1-09c1-45b4-8a85-16c601d30feb"}, {"url": "https://www.innorix.com/", "source": "09832df1-09c1-45b4-8a85-16c601d30feb"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "09832df1-09c1-45b4-8a85-16c601d30feb", "description": [{"lang": "en", "value": "CWE-22"}, {"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Missing Authorization vulnerability in Innorix WP allows Path Traversal.This issue affects Innorix WP from All versions If the \"exam\" directory exists under the directory where the product is installed (ex: innorix/exam)"}, {"lang": "es", "value": "Limitaci\u00f3n Incorrecta de un Nombre de Ruta a un Directorio Restringido ('Salto de Ruta'), vulnerabilidad de Autorizaci\u00f3n Faltante en Innorix WP permite el Salto de Ruta. Este problema afecta a Innorix WP desde Todas las versiones Si el directorio \u201cexam\u201d existe bajo el directorio donde el producto est\u00e1 instalado (ej: innorix/exam)"}], "lastModified": "2026-10-07T12:10:00.170", "sourceIdentifier": "09832df1-09c1-45b4-8a85-16c601d30feb"}