CVE-2025-8343 | openviglet shio up to 0.3.8 ShStaticFileAPI.java shStaticFilePreUpload fileName path traversal (Issue 1028)

A vulnerability was found in openviglet shio up to 0.3.8. It has been rated as critical. This issue affects the function shStaticFilePreUpload of the file shio-app/src/main/java/com/viglet/shio/api/staticfile/ShStaticFileAPI.java. The manipulation of the argument fileName leads to path traversal.

The identification of this vulnerability is CVE-2025-8343. The attack may be initiated remotely. Furthermore, there is an exploit available.