CVE-2025-1584

A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown code of the file solon-projects/solon-web/solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles/StaticMappings.java. The manipulation leads to path traversal:...

EUVD-2025-4303

Malicious code in bioql PyPI...

OpenSolon 安全漏洞

OpenSolon is a full-scenario Java enterprise application development framework open-sourced by OpenSolon. A security vulnerability exists in OpenSolon version 3.1.2, which stems from the presence of directory traversal in the solon-faas-luffy component, which could lead to a cross-site scripting...

CVE-2025-2961

A vulnerability classified as problematic was found in opensolon up to 3.1.0. This vulnerability affects the function rendermav of the file /aa of the component org.noear.solon.core.handle.RenderManager. The manipulation of the argument template with the input ../org/example/HelloApp.class leads ...

CVE-2025-2961

A vulnerability classified as problematic was found in opensolon up to 3.1.0. This vulnerability affects the function rendermav of the file /aa of the component org.noear.solon.core.handle.RenderManager. The manipulation of the argument template with the input ../org/example/HelloApp.class leads ...

CVE-2025-2961

OpenSolon (up to 3.1.0) contains a path traversal flaw in render_mav of RenderManager (org.noear.solon.core.handle.RenderManager). By manipulating the template argument (example: ../org/example/HelloApp.class), an attacker can cause path traversal to ../filedir; the vulnerability is exploitable r...

CVE-2025-2961 opensolon org.noear.solon.core.handle.RenderManager aa render_mav path traversal

A vulnerability classified as problematic was found in opensolon up to 3.1.0. This vulnerability affects the function rendermav of the file /aa of the component org.noear.solon.core.handle.RenderManager. The manipulation of the argument template with the input ../org/example/HelloApp.class leads ...

CVE-2025-2961 opensolon org.noear.solon.core.handle.RenderManager aa render_mav path traversal

A vulnerability classified as problematic was found in opensolon up to 3.1.0. This vulnerability affects the function rendermav of the file /aa of the component org.noear.solon.core.handle.RenderManager. The manipulation of the argument template with the input ../org/example/HelloApp.class leads ...

OpenSolon 安全漏洞

OpenSolon is a full-scenario Java enterprise application development framework open-sourced by OpenSolon. A security vulnerability exists in OpenSolon 3.1.0 and earlier versions, which stems from a path traversal issue caused by incorrect manipulation of the parameter template...

CVE-2025-1584

A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown code of the file solon-projects/solon-web/solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles/StaticMappings.java. The manipulation leads to path traversal:...

CVE-2025-1584 opensolon Solon StaticMappings.java path traversal

A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown code of the file solon-projects/solon-web/solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles/StaticMappings.java. The manipulation leads to path traversal:...

CVE-2025-1584 opensolon Solon StaticMappings.java path traversal

A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown code of the file solon-projects/solon-web/solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles/StaticMappings.java. The manipulation leads to path traversal:...

CVE-2025-1584

Solon up to 3.0.8 is affected by a path traversal in StaticMappings.java (StaticMappings.java) that can be triggered remotely via a ../filedir payload. Public exploit information exists; upgrading to 3.0.9 mitigates the issue. The patch is identified as f46e47fd1f8455b9467d7ead3cdb0509115b2ef1. A...