8 matches found
CVE-2026-120316
http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching and HotReload that allows unauthenticated attackers to read files outside baseTemplateDir by supplying ../ segments in ViewModel.template values. Attackers can influence request-driven template selecti...
CVE-2026-120316 http4k before 6.62.0.0-ee Path Traversal via ThymeleafTemplates Template Resolution
http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching and HotReload that allows unauthenticated attackers to read files outside baseTemplateDir by supplying ../ segments in ViewModel.template values. Attackers can influence request-driven template selecti...
CVE-2026-120316 http4k before 6.62.0.0-ee Path Traversal via ThymeleafTemplates Template Resolution
http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching and HotReload that allows unauthenticated attackers to read files outside baseTemplateDir by supplying ../ segments in ViewModel.template values. Attackers can influence request-driven template selecti...
CVE-2026-120316 http4k before 6.62.0.0-ee Path Traversal via ThymeleafTemplates Template Resolution
http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching and HotReload that allows unauthenticated attackers to read files outside baseTemplateDir by supplying ../ segments in ViewModel.template values. Attackers can influence request-driven template selecti...
CVE-2026-120316
The http4k framework (versions before 6.62.0.0-ee ) is vulnerable to a path traversal vulnerability within the ThymeleafTemplates Caching and HotReload components. An unauthenticated attacker can provide ../ segments in ViewModel.template() values to influence request-driven template selection. T...
EUVD-2026-115005
http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching and HotReload that allows unauthenticated attackers to read files outside baseTemplateDir by supplying ../ segments in ViewModel.template values. Attackers can influence request-driven template selecti...
CVE-2026-120316: http4k: http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching and HotReload that…
http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching and HotReload that allows unauthenticated attackers to read files outside baseTemplateDir by supplying ../ segments in ViewModel.template values. Attackers can influence request-driven template selecti...
PT-2026-135263
http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching and HotReload that allows unauthenticated attackers to read files outside baseTemplateDir by supplying ../ segments in ViewModel.template values. Attackers can influence request-driven template selecti...