PT-2024-28721 · Solara · Solara

Sunrisexu · Published 2024-07-12 · Updated 2025-03-10 · CVE-2024-39903

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions Solara versions prior to 1.35.1

Description A Local File Inclusion (LFI) vulnerability was identified in Solara, which arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../' when serving static files. An attacker can exploit this flaw by manipulating the fragment part of the URI to read arbitrary files on the local file system.

Recommendations For versions prior to 1.35.1, update to version 1.35.1 to resolve the issue. As a temporary workaround, consider restricting access to static files to minimize the risk of exploitation. Avoid using directory traversal sequences such as '../' in URI fragments until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-39903

GHSA-9794-PC4R-438W

Affected Products

Solara

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/39xxx/CVE-2024-39903.json · Exploit
• https://github.com/widgetti/solara/commit/df2fd66a7f4e8ffd36e8678697a8a4f76760dc54 · Patch
• https://github.com/widgetti/solara/security/advisories/GHSA-9794-pc4r-438w · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-39903 · Security Note
• https://osv.dev/vulnerability/GHSA-9794-pc4r-438w · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-39903 · Vendor Advisory
• https://github.com/widgetti/solara · Note
• https://t.me/csirt_italia/2270 · Telegram Post
• https://t.me/cvedetector/759 · Telegram Post