Description
http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching and HotReload that allows unauthenticated attackers to read files outside baseTemplateDir by supplying ../ segments in ViewModel.template() values. Attackers can influence request-driven template selection so Thymeleaf's FileTemplateResolver resolves escaped paths without containment checks, disclosing any file readable by the server process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| http4k | http4k | < 6.62.0.0-ee | 6.62.0.0-ee |
References
- GitHub Security Advisory (GHSA-wq4x-r858-gmmj) vendor-advisory
- VulnCheck Advisory: http4k before 6.62.0.0-ee Path Traversal via ThymeleafTemplates Template Resolution third-party-advisory