Threats tagged 'ghsa-27j2-h3m2-8237'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	9.1	EPSS 0.9%	CVE-2026-84939Libfreemarker java · Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier Medium9.1EPSS 0.9%2026-09-10GCVE DatabaseCVE-2026-84939 A path traversal vulnerability exists in Apache FreeMarker's template loading mechanism when an attacker can specify a malformed locale identifier and localized lookup is enabled (enabled by default). This affects versions from 2.2.0 through 2.3.34. The vulnerability allows unauthorized access to files within the constraints of the configured TemplateLoader. Users should upgrade to version 2.3.35 or disable localized lookup to mitigate the issue. EPSS 0.9%Vulnerability #ghsa-27j2-h3m2-8237 #cwe-23	GCVE Database	2026-09-10

Page 1 of 1