Path Traversal Vulnerability in Atheos Cloud IDE Affected by Improper Parameter Validation
CVE-2025-47788

9.4CRITICAL

Key Information:

Vendor

Atheos

Status
Atheos
Vendor
CVE Published:
15 May 2025

What is CVE-2025-47788?

The Atheos Cloud IDE, prior to version 602, features a security vulnerability stemming from inadequate validation of the $target parameter in controller.php. This flaw allows attackers to exploit path traversal techniques, potentially enabling unauthorized file execution on the server. Users are urged to upgrade to version 602 or later to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Atheos < 602

References

https://github.com/Atheos/Atheos/security/advisories/GHSA...
x_refsource_CONFIRM
https://github.com/Atheos/Atheos/commit/97fe76871578d2011...
x_refsource_MISC

CVSS V4

Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.