CVE-2025-46822
HIGH NUCLEIOsamaTaher Java-springboot-codebase - Path Traversal
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2025-46822. PoCs published by d3sca, HORKimhab. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates an arbitrary file read vulnerability in Java-springboot-codebase 1.1 via path traversal. It constructs a malicious URL to retrieve sensitive files from the target system without authentication.
Description
OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects. Prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, insufficient path traversal mechanisms make absolute path traversal possible. This vulnerability allows unauthorized access to sensitive internal files. Commit c835c6f7799eacada4c0fc77e0816f250af01ad2 contains a patch for the issue.
Exploits (3)
This exploit demonstrates an arbitrary file read vulnerability in Java-springboot-codebase 1.1 via path traversal. It constructs a malicious URL to retrieve sensitive files from the target system without authentication.
The repository contains functional Python exploit code for CVE-2025-46822, an unauthenticated arbitrary file read vulnerability in Spring Boot applications. The exploit leverages path traversal via absolute paths in the `/api/v1/files/{fileName}` endpoint, bypassing `Path.resolve()` protections.
This PoC exploits an unauthenticated arbitrary file read vulnerability via absolute path traversal in a Java Spring Boot application. The exploit sends a crafted request to the /api/v1/files/{fileName} endpoint to retrieve sensitive files without authentication.
Nuclei Templates (1)
References (2)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P