PT-2025-22407 · Osamataher · Java-Springboot-Codebase

Publicado 2025-05-21 · Atualizado 2025-06-13 · CVE-2025-46822

Positive Technologies (AI Summary)

CVSS v4.0

8.7

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OsamaTaher/Java-springboot-codebase versions prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2

Description The issue is related to insufficient path traversal mechanisms, making absolute path traversal possible. This allows unauthorized access to sensitive internal files.

Recommendations For versions prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, update to a version that includes the patch from commit c835c6f7799eacada4c0fc77e0816f250af01ad2 to resolve the issue. As a temporary workaround, consider restricting access to sensitive internal files until the patch is applied.

Exploit

Correção

Enumeração de Fraquezas

CWE-36

Identificadores relacionados

CVE-2025-46822

GHSA-Q6MM-CM37-W637

Produtos afetados

Java-Springboot-Codebase

Referências · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/46xxx/CVE-2025-46822.json · Exploit
• 🔥 https://github.com/OsamaTaher/Java-springboot-codebase/security/advisories/GHSA-q6mm-cm37-w637 · Exploit
• https://github.com/OsamaTaher/Java-springboot-codebase/commit/c835c6f7799eacada4c0fc77e0816f250af01ad2 · Nota
• https://twitter.com/CVEnew/status/1925247835248734675 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-46822 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-46822 · Nota de Segurança
• https://twitter.com/pdnuclei_bot/status/1933570066219741410 · Publicação no Twitter