Skip to content
5.3 Medium

CVE-2025-2961 A vulnerability classified as problematic was found in opensolon up to 3.1.0

Description

A vulnerability classified as problematic was found in opensolon up to 3.1.0. This vulnerability affects the function render_mav of the file /aa of the component org.noear.solon.core.handle.RenderManager. The manipulation of the argument template with the input ../org/example/HelloApp.class leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products and versions

Product Affected versions Fixed in
opensolon 3.1 No fix stated
opensolon 3.0 No fix stated
Track this CVE