Approved changes feed: RSS · Atom

cpe:2.3:a:viglet:shio:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorViglet (f405427f-7d92-5f58-ab2b-de06ced31f88)
ProductShio (e029a248-e4d2-569e-8166-4d4d823795b9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
pkg:github/openviglet/shio purl2cpe 2026-07-28 16:41:16.819091

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8344 vulnerable 2026-06-08 07:45:20.020438 openviglet shio ShStaticFileAPI.java shStaticFileUpload unrestricted upload
MEDIUM (6.3)
A vulnerability classified as critical has been found in openviglet shio up to 0.3.8. Affected is the function shStaticFileUpload of the file shio-app/src/main/java/com/viglet/shio/api/staticfile/ShStaticFileAPI.java. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-31T01:32:05.152Z
Updated: 2025-07-31T14:33:44.225Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8343 vulnerable 2026-06-08 07:45:20.019798 openviglet shio ShStaticFileAPI.java shStaticFilePreUpload path traversal
MEDIUM (4.3)
A vulnerability was found in openviglet shio up to 0.3.8. It has been rated as critical. This issue affects the function shStaticFilePreUpload of the file shio-app/src/main/java/com/viglet/shio/api/staticfile/ShStaticFileAPI.java. The manipulation of the argument fileName leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-31T01:02:06.447Z
Updated: 2025-07-31T14:33:50.154Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.