50 matches found
org.noear:folkmq-broker-embedded (>=1.7.8 <=1.7.11), org.noear:grit-server-solon-plugin (>=2.0.0 <=2.0.1) +21 more potentially affected by CVE-2025-2961 via org.noear:solon-view (>=2.9.2-M1 <=3.1.0)
org.noear:solon-view MAVEN version =2.9.2-M1, =1.7.8, =2.0.0, =2.0.0, =1.9.2, =1.8.0, =1.8.0, =3.10.0, =3.10.0, =3.10.0, =2.9.2, =2.9.2, =2.9.2, =2.9.2, =2.9.2, =2.9.2, =3.10.7 and more Source cves: CVE-2025-2961 Source advisory: OSV:GHSA-2M4Q-2C6R-HMC3...
Path Traversal
org.noear:solon-web-staticfiles is vulnerable to Path Traversal. The vulnerability is due to improper validation of user-supplied file paths in StaticMappings.java, allowing an attacker to access arbitrary files using "../filedir"...
Relative Path Traversal
Overview Affected versions of this package are vulnerable to Relative Path Traversal through the manipulation of the file path in StaticMappings.java using a relative path such as '../filedir'. An attacker can access files and directories stored outside of the web server's root directory by...
com.easy-flowable:easy-flowable-solon-plugin (>=1.0.0 <=1.0.2), com.luomor.pcsms:pcsms-solon-plugin-example (>=1.0.0 <=1.0.1) +17 more potentially affected by CVE-2025-1584 via org.noear:solon-web-staticfiles (>=3.0.0-M1 <=3.0.9-M2)
org.noear:solon-web-staticfiles MAVEN version =3.0.0-M1, =1.0.0, =1.0.0, =2024.3.0, =1.3.0, =20250107, =3.3.4, =1.8.4, =1.3.1, =1.7.8, =1.9.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.10-M1 and more Source cves: CVE-2025-1584 Source advisory: SNYK:JAVA-ORGNOEAR-8745976...
Solon Path Traversal
A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown code of the file solon-projects/solon-web/solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles/StaticMappings.java. The manipulation leads to path traversal:...
com.easy-flowable:easy-flowable-solon-plugin (>=1.0.0 <=1.0.2), com.luomor.pcsms:pcsms-solon-plugin-example (>=1.0.0 <=1.0.1) +17 more potentially affected by CVE-2025-1584 via org.noear:solon-web-staticfiles (>=2.9.2-M1 <=3.0.9-M2)
org.noear:solon-web-staticfiles MAVEN version =2.9.2-M1, =1.0.0, =1.0.0, =2024.3.0, =1.3.0, =20250107, =3.3.4, =1.8.4, =1.3.1, =1.7.8, =1.8.0, =2.9.2, =2.9.2, =2.9.2, =2.9.2, =3.0.10-M1 and more Source cves: CVE-2025-1584 Source advisory: OSV:GHSA-X8Q6-CCHR-P7M6...
GHSA-X8Q6-CCHR-P7M6 Solon Path Traversal
A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown code of the file solon-projects/solon-web/solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles/StaticMappings.java. The manipulation leads to path traversal:...
CVE-2025-1584 opensolon Solon StaticMappings.java path traversal
A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown code of the file solon-projects/solon-web/solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles/StaticMappings.java. The manipulation leads to path traversal:...
Solon 安全漏洞
Solon is a new ecological application development framework for Java for noear individual developers in China. A security vulnerability exists in Solon 3.0.8 and earlier versions, which stems from a path traversal issue...
GHSA-VWGG-2Q82-38C5 Solon is vulnerable to Deserialization of Untrusted Data
Ssolon = 2.6.0 and =2.5.12 is vulnerable to Deserialization of Untrusted Data...
cn.dev33:sa-token-dao-redisx (>=1.30.0 <=1.30.0.RC), cn.dev33:sa-token-solon-plugin (>=1.20.0 <=1.37.0) +516 more potentially affected by CVE-2023-48967 via org.noear:solon (>=1.0.10 <=2.6.0)
org.noear:solon MAVEN version =1.0.10, =1.30.0, =1.20.0, =1, =1, =1, =1.7.0, =1.7.0, =4.1.0, =1.0.0, =1.5.29, =1.2.6, =1.0.0, =1.0.0, =1.0.0, =1.5.0.RELEASE, =1.5.1.RELEASE and more Source cves: CVE-2023-48967 Source advisory: OSV:GHSA-VWGG-2Q82-38C5...
Solon is vulnerable to Deserialization of Untrusted Data
Ssolon = 2.6.0 and =2.5.12 is vulnerable to Deserialization of Untrusted Data...
Solon Security Vulnerabilities
Solon is a new ecological application development framework for Java for noear individual developers in China. A security vulnerability exists in Solon versions 2.6.x through 2.6.0 and 2.5.x through 2.5.12, which arises from a process that allows data to be received from untrusted sources and...
solon-buch.de Cross Site Scripting vulnerability OBB-3657044
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
solon-buch.de Cross Site Scripting vulnerability OBB-3506687
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GHSA-7Q8C-49F4-4C8Q Solon vulnerable to deserialization of untrusted data
A bypass in the component sofa-hessian of Solon before v2.3.3 allows attackers to execute arbitrary code via providing crafted payload...
cn.dev33:sa-token-dao-redisx (>=1.30.0 <=1.30.0.RC), cn.dev33:sa-token-solon-plugin (>=1.20.0 <=1.35.0.RC) +442 more potentially affected by CVE-2023-35839 via org.noear:solon (>=1.0.10 <=2.3.3-M3)
org.noear:solon MAVEN version =1.0.10, =1.30.0, =1.20.0, =1, =1, =1, =4.1.0, =1.5.29, =1.0.0, =1.0.0, =3.2.0, =1.0.8, =3.0.0-M6, =1.0.9, =1.7.3 and more Source cves: CVE-2023-35839 Source advisory: OSV:GHSA-7Q8C-49F4-4C8Q...
Solon vulnerable to deserialization of untrusted data
A bypass in the component sofa-hessian of Solon before v2.3.3 allows attackers to execute arbitrary code via providing crafted payload...
