Search
Find merged stories by title or summary.
cve-2026-59280
Spring Framework Path Traversal via Backslash in SpringTemplateLoader
CVE-2026-59280 - Spring Framework Path Traversal via Backslash in SpringTemplateLoader
CVE ID : CVE-2026-59280 Published : Aug. 27, 2026, 4:41 p. m. • 32 minutes ago Description : Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is configured to resolve templates through SpringTemplateLoader. Spring Framework 7. 0. 0 - 7. 0. 8 Spring Framework 6. 2. 0 - 6. 2. 19 Spring Framework 6. 1. 0 - 6. 1. 28 Spring Framework 6. 0. 0 - 6. 0. 30 Spring Framework 5. 3. 0 - 5. 3. 49 Spring Framework 5. 2. 25. RELEASE and earlier Severity: 0.0 • NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
You've reached the end of current stories for this search.
