Submit #522380: opensolon https://github.com/opensolon/solon <=3.1.0 Path Traversal: '../filedir'info

Titelopensolon https://github.com/opensolon/solon <=3.1.0 Path Traversal: '../filedir'
Beschreibungsolon has arbitrary file reading, when the template name can be controlled and contains beetl components, it will be found that arbitrary file reading can be performed
Quelle⚠️ https://github.com/Q16G/cve_detail/blob/main/solon/templateRCE.md
Benutzer
 760046475 (UID 82919)
Einreichung18.03.2025 08:01 (vor 1 Jahr)
Moderieren29.03.2025 20:57 (12 days later)
StatusAkzeptiert
VulDB Eintrag302014 [opensolon bis 3.1.0 org.noear.solon.core.handle.RenderManager /aa render_mav template Information Disclosure]
Punkte15

Do you need the next level of professionalism?

Upgrade your account now!