CLEANSTART-2026-AM86994 Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is config...

🗓️ 08 Oct 2026 00:43:15Reported by GoogleType

osv🔗 osv.dev👁 5 Views

Path traversal in apache-nifi-registry via Spring Framework's FreeMarker integration.

Reporter	Title	Published	Views	Family All 112
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.2.1	1 Oct 202610:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	8 Sep 202615:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	8 Sep 202615:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	11 Sep 202616:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	9 Sep 202601:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	9 Sep 202601:28	–	ibm
CVE	CVE-2026-59280	27 Aug 202616:41	–	cve
Cvelist	CVE-2026-59280 Spring Framework Path Traversal via Backslash in SpringTemplateLoader	27 Aug 202616:41	–	cvelist
Debian CVE	CVE-2026-59280	27 Aug 202616:41	–	debiancve
EUVD	EUVD-2026-67094	27 Aug 202616:41	–	euvd

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-AM86994.json
osv	www.osv.dev/vulnerability/CVE-2026-59280
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-59280

08 Oct 2026 16:47Current

7.2High risk

Vulners AI Score7.2

CVSS 3.14.3

EPSS0.00349

apache-nifi-registry FreeMarker Spring Framework path traversal SpringTemplateLoader