Approved changes feed: RSS · Atom

cpe:2.3:a:keiyo_system_co.,_ltd:timeworks:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKeiyo System Co., Ltd (e8e3ef38-8bb8-51cd-b4f6-df4aa68eb24e)
ProductTimeworks (621dc6d8-6149-5f50-b442-f83be34dc740)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-41428 vulnerable 2026-06-08 07:25:07.033470 Details available
MEDIUM (5.3)
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker.
Published: 2025-06-03T08:09:40.730Z
Updated: 2025-06-03T13:31:54.645Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.