CyberSecBulletin

Openviglet vulnerabilities

We track 2 vulnerabilities in Openviglet products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 31, 2025.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Openviglet vulnerabilities

  • 9.8 Critical severity

    shio: Improper Access Control

    CVE-2025-8344Openviglet

    A vulnerability classified as critical has been found in openviglet shio up to 0.3.8. Affected is the function shStaticFileUpload of the file shio-app/src/main/java/com/viglet/shio/api/staticfile/ShStaticFileAPI.java. The manipulation of the argument filename

  • 9.8 Critical severity

    shio: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2025-8343Openviglet

    A vulnerability was found in openviglet shio up to 0.3.8. It has been rated as critical. This issue affects the function shStaticFilePreUpload of the file shio-app/src/main/java/com/viglet/shio/api/staticfile/ShStaticFileAPI.java. The manipulation of the argum