Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-2961

opensolon org.noear.solon.core.handle.RenderManager aa render_mav path traversal

Description

A vulnerability classified as problematic was found in opensolon up to 3.1.0. This vulnerability affects the function render_mav of the file /aa of the component org.noear.solon.core.handle.RenderManager. The manipulation of the argument template with the input ../org/example/HelloApp.class leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a opensolon

  • 3.0affected
  • 3.1affected

References