A vulnerability classified as problematic was found in opensolon up to 3.1.0. This vulnerability affects the function render_mav of the file /aa of the component org.noear.solon.core.handle.RenderManager. The manipulation of the argument template with the input ../org/example/HelloApp.class leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
Link | Tags |
---|---|
https://vuldb.com/?id.302014 | vdb entry technical description |
https://vuldb.com/?ctiid.302014 | signature permissions required |
https://vuldb.com/?submit.522380 | third party advisory |
https://github.com/Q16G/cve_detail/blob/main/solon/templateRCE.md | exploit |