CVE-2025-1584

Summary

CVE-2025-1584 is a newly disclosed vulnerability affecting the opensolon Solon software up to version 3.0.8. The issue lies in the StaticMappings.java file located in the solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles directory. This vulnerability enables an attacker to traverse directories (../filedir) remotely, potentially gaining unauthorized access to sensitive files or data. The exploit for this vulnerability has been made public, increasing the risk for potential attacks. To mitigate this vulnerability, users are advised to upgrade to version 3.0.9, which includes the patch with the commit ID f46e47fd1f8455b9467d7ead3cdb0509115b2ef1.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.