Blossom

1 CVEs product

Monthly

CVE-2026-2623 MEDIUM POC This Month

Path traversal in Blossom up to version 1.17.1 file upload functionality allows authenticated remote attackers to access arbitrary files on affected systems. Public exploit code exists for this vulnerability, and no patch is currently available from the vendor despite early notification.

Java Path Traversal Blossom
NVD VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2026-2623
EPSS 0% CVSS 6.3
MEDIUM POC This Month

Path traversal in Blossom up to version 1.17.1 file upload functionality allows authenticated remote attackers to access arbitrary files on affected systems. Public exploit code exists for this vulnerability, and no patch is currently available from the vendor despite early notification.

Java Path Traversal Blossom
NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy