CVE-2026-59280

14th percentile - higher than 14% of all known CVEs

Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is configured to resolve templates through SpringTemplateLoader. Affected versions: Spring Framework 7.0.0 - 7.0.8, 6.2.0 - 6.2.19, 6.1.0 - 6.1.28, 6.0.0 - 6.0.30, 5.3.0 - 5.3.49, and 5.2.25.RELEASE and earlier.

An attacker could access files outside the template directory, potentially leading to disclosure of sensitive information or execution of unauthorized templates.

Update Spring Framework to a patched version (e.g., 7.0.9 or later, 6.2.20 or later, etc.). Additionally, avoid using untrusted input to construct view names.