CVE-2026-53698: Silverpeas Unvalidated Jsp Forward Path Traversal

An unvalidated path segment is concatenated into a base directory path for JSP forwarding. This pattern is susceptible to local file inclusion and path traversal if the input contains traversal operators (../) capable of breaking out of the designated directory.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Java
greprules fetch cve-2026-53698-silverpeas-unvalidated-jsp-forward-path-traversal --engine opengrep

Description

An unvalidated path segment is concatenated into a base directory path for JSP forwarding. This pattern is susceptible to local file inclusion and path traversal if the input contains traversal operators (../) capable of breaking out of the designated directory.