Zurück zur CVE-Übersicht
CVE-2026-55760
HIGH(7.5)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Risk Signal Score29/100 — MITTEL
- CVSS 7.5 — Hoch
- Weniger als 24 Stunden alt
Beschreibung
Handlebars.java provides logic-less and semantic Mustache templates with Java. Prior to 4.5.2, applications that pass user-controlled input to Handlebars.compile() using FileTemplateLoader or ClassPathTemplateLoader are vulnerable to path traversal, allowing arbitrary file read through template names derived from URL path parameters, request parameters, or other user-controlled sources. This issue is fixed in version 4.5.2.
GitHub Advisories
GHSA-r4gv-qr8j-p3pgHIGH
handlebars.java FileTemplateLoader Path Traversal
maven/com.github.jknack:handlebars→ 4.5.2
GitHub Advisory