Relative Path Traversal

Overview Affected versions of this package are vulnerable to Relative Path Traversal through the rendermav function. An attacker can access or modify files on the server by manipulating the input to traverse outside the intended directory structure. Remediation Upgrade org.noear:solon-view-beetl ...

org.noear:solon-view-beetl (2.9.2-m2), org.noear:solon-view-enjoy (2.9.2-m2) +12 more potentially affected by CVE-2025-2961 via org.noear:solon-view (2.9.2-m2)

org.noear:solon-view MAVEN version 2.9.2-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon-view and may be impacted: - org.noear:solon-view-beetl 2.9.2-m2 - org.noear:solon-view-enjoy 2.9.2-m2 - org.noear:solon-view-freemarker 2.9.2-m2...