CVE-2025-46822 describes an absolute path traversal vulnerability in OsamaTaher/Java-springboot-codebase, a collection of Java and Spring Boot code. This flaw, present before commit c835c6f7799eacada4c0fc77e0816f250af01ad2, allows unauthorized access to sensitive internal files. Rated HIGH with a CVSS score of 7.7, the vulnerability is easily exploitable over the network with low attack complexity, potentially leading to high confidentiality impacts. While not currently on the KEV catalog, exploit intelligence indicates public exploit code availability through Nuclei templates and ExploitDB, and it has garnered significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| OsamaTaher | Java-Springboot-Codebase | < c835c6f7799eacada4c0fc77e0816f250af01ad2CNA affected |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.