CVE-2025-15066 — Arbitrary File Download through Path Traversal in Innorix WP

CVE-2025-15066

Arbitrary File Download through Path Traversal in Innorix WP PUBLISHED

Description (CNA)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Missing Authorization vulnerability in Innorix WP allows Path Traversal.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed (ex: innorix/exam)

Affected (CNA)

Vendor / product	Versions
Innorix / Innorix WP	unknown 0 before *

CWE

CWE-22, CWE-862

References

https://www.innorix.com/
https://www.gnit.co.kr/software/innorix_product.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.