CVE-2024-39903 Scanner
CVE-2024-39903 Scanner - Local File Inclusion (LFI) vulnerability in Solara
Used 3.4k times · 3.3k assets checked · domain, ipv4, subdomain
CVE
CVE-2024-39903
7.5
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
Solara is a pure Python, React-style framework for scaling Jupyter and web apps. A Local File Inclusion (LFI) vulnerability was identified in widgetti/solara, in version <1.35.1, which was fixed in version 1.35.1. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../' when serving static files. An attacker can exploit this flaw by manipulating the fragment part of the URI to read arbitrary files on the local file system.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
solara
Updated Sep 26, 2026View on NVD →
S4E scanner
CVE history: solara
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →