CVE-2025-1584

MEDIUM EPSS 40.5%
Published Feb 23, 20251y ago · Modified Jun 17, 20261w ago
5.3 CVSS 4.0
Medium
Find Similar
Published Feb 23, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown code of the file solon-projects/solon-web/solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles/StaticMappings.java. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.0.9 is able to address this issue. The name of the patch is f46e47fd1f8455b9467d7ead3cdb0509115b2ef1. It is recommended to upgrade the affected component.

CVSS Details

Base Score
5.3
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
40.5% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 2

CWE-23
CWE-24

References 7

  • github.com https://github.com/opensolon/solon/commit/f46e47fd1f8455b9467d7ead3cdb0509115b2ef1
  • github.com https://github.com/opensolon/solon/issues/332
  • github.com https://github.com/opensolon/solon/issues/332#issue-2866229828
  • github.com https://github.com/opensolon/solon/issues/332#issuecomment-2674330700
  • vuldb.com https://vuldb.com/?ctiid.296560
  • vuldb.com https://vuldb.com/?id.296560
  • vuldb.com https://vuldb.com/?submit.504454

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.