CVE-2025-41428
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be vi…
Published: 2025-06-03 · CVSS: 6.9 · CVSS 4.0
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7