What is CVE-2025-46822?

CVE-2025-46822 is a vulnerability in Osamataher Java-springboot-codebase, classified under Absolute Path Traversal. Published 2025-05-21.

Is CVE-2025-46822 known to be exploited?

5 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Path Traversal in Osamataher Java-springboot-codebase

CVE-2025-46822

OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects. Prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, insufficient path traversal mechanisms make absolute path trav…

EPSS: 0.038 (88.8th percentile) — read the EPSS interpretation.

Affected products

Osamataher Java-springboot-codebase — versions < c835c6f7799eacada4c0fc77e0816f250af01ad2

Weakness classification (CWE)

CWE-36 — Absolute Path Traversal

Public proof-of-concept exploits

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2025-46822?: CVE-2025-46822 is a vulnerability in Osamataher Java-springboot-codebase, classified under Absolute Path Traversal. Published 2025-05-21.
Is CVE-2025-46822 known to be exploited?: 5 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.