VYPR
Medium severity6.3NVD Advisory· Published Jul 31, 2025· Updated Apr 29, 2026

CVE-2025-8344

CVE-2025-8344

Description

A vulnerability classified as critical has been found in openviglet shio up to 0.3.8. Affected is the function shStaticFileUpload of the file shio-app/src/main/java/com/viglet/shio/api/staticfile/ShStaticFileAPI.java. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

1
  • cpe:2.3:a:viglet:shio:*:*:*:*:*:*:*:*
    Range: <=0.3.8

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.