CVE-2025-46822

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-46822

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-46822.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-46822

Aliases

GHSA-q6mm-cm37-w637

Published

2025-05-21T17:23:37.087Z

Modified

2026-04-12T16:30:25.470562Z

Severity

7.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

Unauthenticated Arbitrary File Read via Absolute Path

Details

OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects. Prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, insufficient path traversal mechanisms make absolute path traversal possible. This vulnerability allows unauthorized access to sensitive internal files. Commit c835c6f7799eacada4c0fc77e0816f250af01ad2 contains a patch for the issue.

Database specific

{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-36"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/46xxx/CVE-2025-46822.json"
}

References

Affected packages

Git / github.com/osamataher/java-springboot-codebase

Affected ranges

Type: GIT
Repo: https://github.com/osamataher/java-springboot-codebase
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

c835c6f7799eacada4c0fc77e0816f250af01ad2

Database specific

vanir_signatures_modified

"2026-04-12T16:30:25Z"

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-46822.json"

vanir_signatures

[
    {
        "signature_version": "v1",
        "digest": {
            "length": 420.0,
            "function_hash": "260230418838711861198161572500178582530"
        },
        "target": {
            "function": "loadAsResource",
            "file": "springboot/common-dynamic-management-services/src/main/java/common/management/common/service/impl/FileSystemStorageService.java"
        },
        "source": "https://github.com/osamataher/java-springboot-codebase/commit/c835c6f7799eacada4c0fc77e0816f250af01ad2",
        "signature_type": "Function",
        "id": "CVE-2025-46822-0114e15f",
        "deprecated": false
    },
    {
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "203953969501825620970159642562371232304",
                "10217223470350441853596457596520529134",
                "27639520389873436870741280646302556264",
                "155525985895048319347373879003943397252",
                "186098814722127722644057718867103747950",
                "226947744514770479911046935354954081403",
                "78712438200789090849623638058074170175",
                "88382266504576815765586143787067916789",
                "93919912508821731961569126292436138337",
                "337357567657574738521122925024563213347",
                "200858238921967257313401939460835780468",
                "188551981661242820003083977331948077789",
                "162154344795528626551864506595622055466",
                "179227024468350877568222929449303031364",
                "132008025296685021806192388672237769925"
            ]
        },
        "target": {
            "file": "springboot/common-dynamic-management-services/src/main/java/common/management/common/service/impl/FileSystemStorageService.java"
        },
        "source": "https://github.com/osamataher/java-springboot-codebase/commit/c835c6f7799eacada4c0fc77e0816f250af01ad2",
        "signature_type": "Line",
        "id": "CVE-2025-46822-4b564161",
        "deprecated": false
    },
    {
        "signature_version": "v1",
        "digest": {
            "length": 787.0,
            "function_hash": "154297430224649340341675519398399040535"
        },
        "target": {
            "function": "store",
            "file": "springboot/common-dynamic-management-services/src/main/java/common/management/common/service/impl/FileSystemStorageService.java"
        },
        "source": "https://github.com/osamataher/java-springboot-codebase/commit/c835c6f7799eacada4c0fc77e0816f250af01ad2",
        "signature_type": "Function",
        "id": "CVE-2025-46822-e82343d6",
        "deprecated": false
    }
]