NuytsTech Security

CVE-2025-41428

by ·

Improper limitation of a pathname to a restricted directory (‘Path Traversal’) issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker.

Assigner : vultures@jpcert.or.jp

More information : https://jvn.jp/en/jp/JVN37075430/

Tags: