VYPR
← All advisories
Critical severityOSV Advisory· Published May 15, 2025· Updated Apr 15, 2026

CVE-2025-47788

CVE-2025-47788

Description

Atheos is a self-hosted browser-based cloud IDE. Prior to v602, similar to GHSA-rgjm-6p59-537v/CVE-2025-22152, the $target parameter in /controller.php was not properly validated, which could allow an attacker to execute arbitrary files on the server via path traversal. v602 contains a fix for the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Atheos/AtheosOSV2 versions
    v.1.0.0, v.1.0.1, v.1.1.0, …+ 1 more
    • (no CPE)range: v.1.0.0, v.1.0.1, v.1.1.0, …
    • (no CPE)range: < 602

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.