Submit #522380: opensolon https://github.com/opensolon/solon <=3.1.0 Path Traversal: '../filedir'info

Titleopensolon https://github.com/opensolon/solon <=3.1.0 Path Traversal: '../filedir'
Descriptionsolon has arbitrary file reading, when the template name can be controlled and contains beetl components, it will be found that arbitrary file reading can be performed
Source⚠️ https://github.com/Q16G/cve_detail/blob/main/solon/templateRCE.md
User
 760046475 (UID 82919)
Submission03/18/2025 08:01 (1 Year ago)
Moderation03/29/2025 20:57 (12 days later)
StatusAccepted
VulDB entry302014 [opensolon up to 3.1.0 org.noear.solon.core.handle.RenderManager /aa render_mav template path traversal]
Points15

Want to stay up to date on a daily basis?

Enable the mail alert feature now!