Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the SpringTemplateLoader process. An attacker can access sensitive files outside the intended template directory by supplying a crafted view name containing backslash sequences. This is only exploitable if a...