Skip to main content

Relative Path Traversal

CVE-2025-1584

Medium
5.3/10

Summary

A vulnerability classified as problematic was found in opensolon Solon in the file 'solon-projects/solon-web/solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles/StaticMappings.java'. The manipulation leads to path traversal using '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. This issue affects org.noear:solon-web-staticfiles versions prior to 3.0.9.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • LOW
  • LOW
  • NONE

CWE-23 - Relative Path Traversal

The software uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

References

Advisory Timeline

  • Published