CVE-2026-11470: Hsweb Fileupload Path Traversal

Potential path traversal due to unsanitized DTO field assignment.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0

Java^β

greprules fetch cve-2026-11470-hsweb-fileupload-path-traversal --engine opengrep

Description

Potential path traversal due to unsanitized DTO field assignment.

License: Apache-2.0
Source context: Public repository
Source: Provally CVE rule catalog
Validation status: Verified
Quality signals: 145 downloads
0 direct145 via packs
· 0 stars · Quality score 70How quality works
Included packs: 2 packs

0 signals from signed-in users.