CVE-2025-8343

A vulnerability was found in openviglet shio up to 0.3.8. It has been rated as critical. This issue affects the function shStaticFilePreUpload of the file shio-app/src/main/java/com/viglet/shio/api/staticfile/ShStaticFileAPI.java. The manipulation of the argument fileName leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

• CWE-22

• https://github.com/openviglet/shio/issues/1028Exploit, Issue Tracking, Vendor Advisory
• https://github.com/openviglet/shio/issues/1028#issue-3239418750Exploit, Issue Tracking, Vendor Advisory
• https://vuldb.com/?ctiid.318293Permissions Required, VDB Entry
• https://vuldb.com/?id.318293Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.617679Third Party Advisory, VDB Entry
• https://github.com/openviglet/shio/issues/1028Exploit, Issue Tracking, Vendor Advisory

Published

Jul 31, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-8337A vulnerability, which was classified as problematic, has be…5.4
• CVE-2025-8338A vulnerability was found in projectworlds Online Admission …9.8
• CVE-2025-8339A vulnerability was found in code-projects Intern Membership…9.8
• CVE-2025-8340A vulnerability was found in code-projects Intern Membership…6.1
• CVE-2025-8341Grafana is an open-source platform for monitoring and observ…5
• CVE-2025-8342The WooCommerce OTP Login With Phone Number, OTP Verificatio…8.1
• CVE-2025-8344A vulnerability classified as critical has been found in ope…9.8
• CVE-2025-8345A vulnerability classified as critical was found in Shanghai…9.8
• CVE-2025-8346A vulnerability, which was classified as problematic, has be…6.1
• CVE-2025-8347A vulnerability, which was classified as critical, was found…6.5
• CVE-2025-8348A vulnerability has been found in Kehua Charging Pile Cloud …7.5
• CVE-2025-8349Cross-site Scripting (XSS) stored vulnerability in Tawk Live…5.3