CVE-2025-46822

This exploit demonstrates an arbitrary file read vulnerability in Java-springboot-codebase 1.1 via path traversal. It constructs a malicious URL to retrieve sensitive files from the target system without authentication.

This PoC exploits an unauthenticated arbitrary file read vulnerability via absolute path traversal in a Java Spring Boot application. The exploit sends a crafted request to the /api/v1/files/{fileName} endpoint to retrieve sensitive files without authentication.