49 matches found
Relative Path Traversal
Overview Affected versions of this package are vulnerable to Relative Path Traversal through the manipulation of the file path in StaticMappings.java using a relative path such as '../filedir'. An attacker can access files and directories stored outside of the web server's root directory by...
GHSA-X8Q6-CCHR-P7M6 Solon Path Traversal
A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown code of the file solon-projects/solon-web/solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles/StaticMappings.java. The manipulation leads to path traversal:...
Solon Path Traversal
A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown code of the file solon-projects/solon-web/solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles/StaticMappings.java. The manipulation leads to path traversal:...
CVE-2025-1584
A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown code of the file solon-projects/solon-web/solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles/StaticMappings.java. The manipulation leads to path traversal:...
CVE-2025-1584 opensolon Solon StaticMappings.java path traversal
A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown code of the file solon-projects/solon-web/solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles/StaticMappings.java. The manipulation leads to path traversal:...
PT-2025-7670
Name of the Vulnerable Software and Affected Versions opensolon Solon versions up to 3.0.8 Description A vulnerability was found in the Solon Web Static Files component, affecting the file StaticMappings.java. The manipulation leads to path traversal, allowing an attacker to access files outside...
CVE-2025-1584: Path Traversal: '../filedir'
A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown code of the file solon-projects/solon-web/solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles/StaticMappings.java. The manipulation leads to path traversal:...
Solon 安全漏洞
Solon is a new ecological application development framework for Java for noear individual developers in China. A security vulnerability exists in Solon 3.0.8 and earlier versions, which stems from a path traversal issue...
Solon is vulnerable to Deserialization of Untrusted Data
Ssolon = 2.6.0 and =2.5.12 is vulnerable to Deserialization of Untrusted Data...
GHSA-VWGG-2Q82-38C5 Solon is vulnerable to Deserialization of Untrusted Data
Ssolon = 2.6.0 and =2.5.12 is vulnerable to Deserialization of Untrusted Data...
Solon Security Vulnerabilities
Solon is a new ecological application development framework for Java for noear individual developers in China. A security vulnerability exists in Solon versions 2.6.x through 2.6.0 and 2.5.x through 2.5.12, which arises from a process that allows data to be received from untrusted sources and...
solon-buch.de Cross Site Scripting vulnerability OBB-3657044
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
solon-buch.de Cross Site Scripting vulnerability OBB-3506687
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Solon vulnerable to deserialization of untrusted data
A bypass in the component sofa-hessian of Solon before v2.3.3 allows attackers to execute arbitrary code via providing crafted payload...
GHSA-7Q8C-49F4-4C8Q Solon vulnerable to deserialization of untrusted data
A bypass in the component sofa-hessian of Solon before v2.3.3 allows attackers to execute arbitrary code via providing crafted payload...
CVE-2023-35839
A bypass in the component sofa-hessian of Solon before v2.3.3 allows attackers to execute arbitrary code via providing crafted payload...
CVE-2023-35839
A bypass in the component sofa-hessian of Solon before v2.3.3 allows attackers to execute arbitrary code via providing crafted payload...
Solon 代码问题漏洞
Solon is a new ecological application development framework for Java for noear individual developers in China. A code issue vulnerability exists in versions prior to Solon 2.3.3 that stems from allowing deserialization of untrusted data...
CVE-2023-35839
Summary: CVE-2023-35839 affects Solon before v2.3.3 due to a bypass in the sofa-hessian component that allows arbitrary code execution when processing a crafted payload. Affected software: Solon (Java) with the sofa-hessian component, prior to version 2.3.3. Root cause / vulnerability detail: A b...
