CVE-2025-46822CWE-36

Unauthenticated Arbitrary File Read via Absolute Path

High · published May 21, 2025

CVSS v4.0
7.7
EPSS
4%
Percentile
90.6
In the wild
Unconfirmed
What it is

OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects. Prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, insufficient path traversal mechanisms make absolute path traversal possible. This vulnerability allows unauthorized access to sensitive internal files. Commit c835c6f7799eacada4c0fc77e0816f250af01ad2 contains a patch for the issue.

The record
Technical detail
CVSS v4.0
7.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
EPSS
0.04072 · 90.6th percentile
Weakness
CWE-36 · Absolute Path Traversal
Published
2025-05-21T17:23Z
EPSS history
Timeline
  • 21 MAY 17:23Z
    Unauthenticated Arbitrary File Read via Absolute Path
    cvelistv5