CVE-2025-41428

TimeWorks CVE-2025-41428 affects the web server module in TimeWorks versions 10.0–10.3, with a path traversal (CWE-22) flaw that can allow a remote unauthenticated attacker to view arbitrary JSON files on the server. Root cause: improper limitation of a pathname to a restricted directory. Public ...