← CVE Intelligence

CVE-2025-41428

Keiyo System Co., LTD / TimeWorks PUBLISHED

Description (CNA)

Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker.

Affected (CNA)

Vendor / productVersions
Keiyo System Co., LTD / TimeWorksaffected 10.0 to 10.3

CWE

CWE-22

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.