CVE-2025-2961

A vulnerability classified as problematic was found in opensolon up to 3.1.0. This vulnerability affects the function rendermav of the file /aa of the component org.noear.solon.core.handle.RenderManager. The manipulation of the argument template with the input ../org/example/HelloApp.class leads ...

org.noear:solon-view-beetl (2.9.2-m2), org.noear:solon-view-enjoy (2.9.2-m2) +12 more potentially affected by CVE-2025-2961 via org.noear:solon-view (2.9.2-m2)

org.noear:solon-view MAVEN version 2.9.2-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon-view and may be impacted: - org.noear:solon-view-beetl 2.9.2-m2 - org.noear:solon-view-enjoy 2.9.2-m2 - org.noear:solon-view-freemarker 2.9.2-m2...

org.noear:folkmq-broker-embedded (>=1.7.8, <=1.7.11), org.noear:grit-server-solon-plugin (>=2.0.0, <=2.0.1) +18 more potentially affected by CVE-2025-2961 via org.noear:solon-view (>=3.0.0-m1, <=3.1.0)

org.noear:solon-view MAVEN version =3.0.0-m1, =1.7.8, =2.0.0, =2.0.0, =1.10.0, =1.9.0, =1.9.0, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.1.0 and more Source cves: CVE-2025-2961 Source advisory: OSV:GHSA-2M4Q-2C6R-HMC3...

org.noear:grit.server.ui-durian (1.9.2-m1), org.noear:solon-view-beetl (2.9.2-m1) +13 more potentially affected by CVE-2025-2961 via org.noear:solon-view (2.9.2-m1)

org.noear:solon-view MAVEN version 2.9.2-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon-view and may be impacted: - org.noear:grit.server.ui-durian 1.9.2-m1 - org.noear:solon-view-beetl 2.9.2-m1 - org.noear:solon-view-enjoy 2.9.2-m1...

org.noear:solon-view-beetl (2.9.3), org.noear:solon-view-enjoy (2.9.3) +12 more potentially affected by CVE-2025-2961 via org.noear:solon-view (2.9.3)

org.noear:solon-view MAVEN version 2.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon-view and may be impacted: - org.noear:solon-view-beetl 2.9.3 - org.noear:solon-view-enjoy 2.9.3 - org.noear:solon-view-freemarker 2.9.3 -...

org.noear:solon-view-beetl (2.9.4), org.noear:solon-view-enjoy (2.9.4) +12 more potentially affected by CVE-2025-2961 via org.noear:solon-view (2.9.4)

org.noear:solon-view MAVEN version 2.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon-view and may be impacted: - org.noear:solon-view-beetl 2.9.4 - org.noear:solon-view-enjoy 2.9.4 - org.noear:solon-view-freemarker 2.9.4 -...

org.noear:solon-view-beetl (2.9.5-m2), org.noear:solon-view-enjoy (2.9.5-m2) +12 more potentially affected by CVE-2025-2961 via org.noear:solon-view (2.9.5-m2)

org.noear:solon-view MAVEN version 2.9.5-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon-view and may be impacted: - org.noear:solon-view-beetl 2.9.5-m2 - org.noear:solon-view-enjoy 2.9.5-m2 - org.noear:solon-view-freemarker 2.9.5-m2...

org.noear:solon.view.beetl (>=3.0.0-m1, <=3.1.1-rc) potentially affected by CVE-2025-2961 via org.noear:solon-view-beetl (>=3.0.0-m1, <=3.1.1-rc)

org.noear:solon-view-beetl MAVEN version =3.0.0-m1, =3.0.0-m1, =3.1.1-rc Source cves: CVE-2025-2961 Source advisory: SNYK:JAVA-ORGNOEAR-9689929...

CVE-2025-2961

creationtimestamp| type| source ---|---|--- 2025-03-30 22:31:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9558 2025-03-31 00:47:00+00:00| seen| https://t.me/cvedetector/21522...

CVE-2025-2961

A vulnerability classified as problematic was found in opensolon up to 3.1.0. This vulnerability affects the function rendermav of the file /aa of the component org.noear.solon.core.handle.RenderManager. The manipulation of the argument template with the input ../org/example/HelloApp.class leads ...

CVE-2025-2961

OpenSolon (up to 3.1.0) contains a path traversal flaw in render_mav of RenderManager (org.noear.solon.core.handle.RenderManager). By manipulating the template argument (example: ../org/example/HelloApp.class), an attacker can cause path traversal to ../filedir; the vulnerability is exploitable r...

CVE-2025-2961 opensolon org.noear.solon.core.handle.RenderManager aa render_mav path traversal

A vulnerability classified as problematic was found in opensolon up to 3.1.0. This vulnerability affects the function rendermav of the file /aa of the component org.noear.solon.core.handle.RenderManager. The manipulation of the argument template with the input ../org/example/HelloApp.class leads ...