What is CVE-2025-46822?

CVE-2025-46822 is a vulnerability in Osamataher Java-Springboot-Codebase, classified under Absolute Path Traversal. Published 2025-05-21.

Is CVE-2025-46822 known to be exploited?

5 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Path Traversal in Osamataher Java-Springboot-Codebase

CVE-2025-46822

OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects. Prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, insufficient path traversal mechanisms make absolute path traversal possible. This vulnerability allows unauthorized access to sensitive internal files. Commit c835c6f7799eacada4c0fc77e0816f250af01ad2 contains a patch for the issue.

EPSS: 0.041 (89.8th percentile) — read the EPSS interpretation.

Affected products

Osamataher Java-springboot-codebase — versions < c835c6f7799eacada4c0fc77e0816f250af01ad2

Weakness classification (CWE)

CWE-36 — Absolute Path Traversal

Public proof-of-concept exploits

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2025-46822?: CVE-2025-46822 is a vulnerability in Osamataher Java-Springboot-Codebase, classified under Absolute Path Traversal. Published 2025-05-21.
Is CVE-2025-46822 known to be exploited?: 5 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.