Atheos is a self-hosted browser-based cloud IDE. Prior to v602, similar to GHSA-rgjm-6p59-537v/CVE-2025-22152, the `$target` parameter in `/controller.php` was not properly validated, which could allow an attacker to execute arbitrary files on the server via path traversal. v602 contains a fix for the issue.
CVSS
No CVSS.
References
Configurations
No configuration.
History
15 Apr 2026, 00:35
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (es) Atheos es un IDE en la nube autoalojado y basado en navegador. Antes de la versión v602, al igual que en GHSA-rgjm-6p59-537v/CVE-2025-22152, el parámetro `$target` en `/controller.php` no se validaba correctamente, lo que podía permitir que un atacante ejecutara archivos arbitrarios en el servidor mediante el path traversal. La versión v602 incluye una solución para este problema. |
19 May 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/Atheos/Atheos/security/advisories/GHSA-x9vw-6vfx-7rx5 - |
16 May 2025, 14:42
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
15 May 2025, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-15 20:16
Updated : 2026-04-15 00:35
NVD link : CVE-2025-47788
Mitre link : CVE-2025-47788
CVE.ORG link : CVE-2025-47788
JSON object : View
Products Affected
No product.