CVE-2025-6108

Vulnerability

Overview

CVE-2025-6108 is a path traversal vulnerability in the Spring-Boot-In-Action project, specifically in the watermarkTest function of ImageUploadService.java. The root cause is the lack of proper validation on the filename parameter during file upload, allowing an attacker to control the destination path [1].

Exploitation

An unauthenticated remote attacker can exploit this by sending a crafted POST request to the /watermarktest endpoint with a filename containing path traversal sequences (e.g., ../../../exploit.sh). The application then writes the uploaded file to the attacker-specified location on the server filesystem [1]. No authentication is required, and the attack vector is network-based.

Impact

Successful exploitation enables arbitrary file write, which can lead to remote code execution if the attacker overwrites executable files (e.g., scripts, configuration files) or places a web shell in a publicly accessible directory. The CVSS v3 score of 6.3 reflects the medium severity, but the actual risk may be higher depending on the deployment context.

Mitigation

The vendor uses a rolling release model and has not provided a patched version. As of the publication date, no official fix is available, and the vendor did not respond to disclosure attempts. Users should implement input validation on the filename parameter, restrict upload paths to a dedicated directory, and ensure the application runs with minimal file system permissions.