CVE-2025-46822

HIGH Year: 2025
Weakness Type
CWE-36
View all →

Vulnerability Description

OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects. Prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, insufficient path traversal mechanisms make absolute path traversal possible. This vulnerability allows unauthorized access to sensitive internal files. Commit c835c6f7799eacada4c0fc77e0816f250af01ad2 contains a patch for the issue.

Related Vulnerabilities

CVE-2023-3765

CRITICAL
CVSS:10.0(Critical)

Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0.

CWE-362023

CVE-2024-10811

CRITICAL
CVSS:9.8(Critical)

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.

CWE-362024

CVE-2024-20401

CRITICAL
CVSS:9.8(Critical)

A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to overwrite arbitrary files on the underlying oper...

CWE-362024

CVE-2024-9924

CRITICAL
CVSS:9.8(Critical)

The fix for CVE-2024-26261 was incomplete, and and the specific package for OAKlouds from Hgiga remains at risk. Unauthenticated remote attackers still can download arbitrary system files, which may b...

CWE-362024

CVE-2025-0851

CRITICAL
CVSS:9.8(Critical)

A path traversal issue in ZipUtils.unzip and TarUtils.untar in Deep Java Library (DJL) on all platforms allows a bad actor to write files to arbitrary locations.

CWE-362025

CVE-2024-51549

CRITICAL
CVSS:9.4(Critical)

Absolute File Traversal vulnerabilities allows access and modification of un-intended resources. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

CWE-362024