Relative Path Traversal

Overview Affected versions of this package are vulnerable to Relative Path Traversal through the manipulation of the file path in StaticMappings.java using a relative path such as '../filedir'. An attacker can access files and directories stored outside of the web server's root directory by...

GHSA-X8Q6-CCHR-P7M6 Solon Path Traversal

A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown code of the file solon-projects/solon-web/solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles/StaticMappings.java. The manipulation leads to path traversal:...

CVE-2025-1584

Solon up to 3.0.8 is affected by a path traversal in StaticMappings.java (StaticMappings.java) that can be triggered remotely via a ../filedir payload. Public exploit information exists; upgrading to 3.0.9 mitigates the issue. The patch is identified as f46e47fd1f8455b9467d7ead3cdb0509115b2ef1. A...