PT-2025-25410 · Unknown+1 · Solon-Faas-Luffy+1

Yaoyao-Cool

·

CVE-2025-46096

·

Publicado

2025-06-13

·

Atualizado

2025-06-23

CVSS v3.1

6.1

Média

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions solon version 3.1.2
Description A Directory Traversal issue allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component.
Recommendations For solon version 3.1.2, consider restricting access to the solon-faas-luffy component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79CWE-22

Identificadores relacionados

CVE-2025-46096
GHSA-M63Q-4HR8-5R5H

Produtos afetados

Solon
Solon-Faas-Luffy