CVE-2025-46822

🗓️ 21 May 2025 17:23:37Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 82 Views🌐 WEB

Unauthenticated file read vulnerability in Java Spring Boot codebase prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2.

Reporter	Title	Published	Views	Family All 14
GithubExploit	Exploit for CVE-2025-46822	23 May 202510:26	–	githubexploit
GithubExploit	Exploit for CVE-2025-46822	23 May 202603:14	–	githubexploit
Circl	CVE-2025-46822	21 May 202517:43	–	circl
CNNVD	Java-springboot-codebase 信息泄露漏洞	21 May 202500:00	–	cnnvd
Cvelist	CVE-2025-46822 Unauthenticated Arbitrary File Read via Absolute Path	21 May 202517:23	–	cvelist
Exploit DB	Java-springboot-codebase 1.1 - Arbitrary File Read	25 May 202500:00	–	exploitdb
Nuclei	Java-springboot-codebase 1.1 - Arbitrary File Read	3 Jun 202606:04	–	nuclei
NVD	CVE-2025-46822	21 May 202518:15	–	nvd
OpenVAS	Generic HTTP Directory Traversal / File Inclusion (Web Dirs) - Active Check	22 Jul 202100:00	–	openvas
OSV	CVE-2025-46822 Unauthenticated Arbitrary File Read via Absolute Path	21 May 202517:23	–	osv

[
  {
    "vendor": "OsamaTaher",
    "product": "Java-springboot-codebase",
    "versions": [
      {
        "version": "< c835c6f7799eacada4c0fc77e0816f250af01ad2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/OsamaTaher/Java-springboot-codebase/commit/c835c6f7799eacada4c0fc77e0816f250af01ad2
github	www.github.com/OsamaTaher/Java-springboot-codebase/security/advisories/GHSA-q6mm-cm37-w637

Parameter	Position	Path	Description	CWE
fileName	path	api/v1/files/{fileName}	Unauthenticated access to internal files via absolute path on the /api/v1/files/{fileName} endpoint	CWE-36

15 Apr 2026 00:35Current

6.6Medium risk

Vulners AI Score6.6

CVSS 48.7

EPSS0.06841

SSVC

CWE-36