CVE-2025-8344

CVE-2025-8344 : OpenViGlet Shio (versions up to 0.3.8) has a flaw in the ShStaticFileAPI.shStaticFileUpload function. Malicious manipulation of the filename argument allows unrestricted file uploads, enabling a remote attack. Publicly disclosed exploits/ PoC exist according to the references. A p...

CVE-2025-8343

CVE-2025-8343 affects openviglet shio up to 0.3.8. The vulnerability is in the function shStaticFilePreUpload of the Java file shio-app/src/main/java/com/viglet/shio/api/staticfile/ShStaticFileAPI.java, where manipulation of the argument fileName allows a path traversal attack. The issue can be t...