← Database

CVE-2025-41428

MEDIUM CVSS: 5.3 Published: 2025-06-03 Modified: 2026-06-17

Description

Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker.

Affected Platforms

Unknown

Weakness Type

CWE-22

References