-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
JavaJava| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.noear:solon-view | maven | <= 3.1.0 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper path validation in template rendering. The primary entry point is RenderManager.render_mav which processes untrusted template parameters from ModelAndView objects. This function then delegates to view renderers like BeetlRender.render, which directly uses the unsanitized path. Both functions appear in the call stack when processing malicious template parameters, with RenderManager being explicitly called out in vulnerability reports and BeetlRender being identified as the concrete implementation that performs unsafe file operations.
KEV Misses 88% of Exploited CVEs- Get the report