Freemarker
Monthly
Path traversal in Apache FreeMarker's template loading (versions 2.2.0 through 2.3.34) lets remote attackers who can influence the locale identifier passed to FreeMarker read templates outside the intended path when the default-enabled localized lookup feature is active. The actual reach is bounded by the configured TemplateLoader - FileTemplateLoader still blocks escape from its baseDir, while classloader- or servlet-context-backed loaders are limited to resources those mechanisms can reach. EPSS is low (0.21%, 11th percentile), no public exploit is identified at time of analysis, and it is not in CISA KEV.
Path traversal in Apache FreeMarker's template loading (versions 2.2.0 through 2.3.34) lets remote attackers who can influence the locale identifier passed to FreeMarker read templates outside the intended path when the default-enabled localized lookup feature is active. The actual reach is bounded by the configured TemplateLoader - FileTemplateLoader still blocks escape from its baseDir, while classloader- or servlet-context-backed loaders are limited to resources those mechanisms can reach. EPSS is low (0.21%, 11th percentile), no public exploit is identified at time of analysis, and it is not in CISA KEV.