4 matches found
CVE-2026-84939
Apache FreeMarker versions 2.2.0 through 2.3.34 contain a path traversal vulnerability in its template loading mechanism. When the localized lookup setting is enabled (the default), an attacker who can supply an arbitrary malformed locale identifier may traverse outside the intended template dire...
EUVD-2026-75251
Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled it's by default enabled. This issue affects Apache FreeMarker from 2.2.0...
CVE-2026-84939 Apache FreeMarker, Apache FreeMarker: A malformed locale may be exploitable for path traversal attacks
Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled it's by default enabled. This issue affects Apache FreeMarker from 2.2.0...