PT-2025-42481 · Unknown · Shazwazza Smidge

Asust9 · Published 2025-10-16 · Updated 2025-10-20 · CVE-2025-11842

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Shazwazza Smidge versions through 4.5.1

Description A security issue exists in Shazwazza Smidge related to the Bundle Handler component. Manipulation of the Version argument can lead to path traversal. Remote exploitation is possible.

Recommendations Upgrade to version 4.6.0 to resolve this issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-11842

GHSA-9RVM-P3QM-F4VV

Affected Products

Shazwazza Smidge

References · 18

• https://github.com/Shazwazza/Smidge/releases/tag/v4.6.0 · Patch
• https://osv.dev/vulnerability/CVE-2025-11842 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9rvm-p3qm-f4vv · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11842 · Security Note
• https://github.com/Shazwazza/Smidge · Note
• https://reddit.com/r/VulnMatter/comments/1o9vs6p/resumen_diario_de_vulnerabilidades_18102025 · Reddit Post
• https://t.me/CVEtracker/35102 · Telegram Post
• https://vuldb.com/?ctiid.328776 · Note
• https://reddit.com/r/VulnMatter/comments/1o9v03c/resumen_diario_de_vulnerabilidades_18102025 · Reddit Post
• https://reddit.com/r/VulnMatter/comments/1ob1a2r/resumen_diario_de_vulnerabilidades_19102025 · Reddit Post
• https://reddit.com/r/VulnMatter/comments/1obkvoc/resumen_diario_de_vulnerabilidades_20102025 · Reddit Post
• https://twitter.com/CVEnew/status/1978926593583071507 · Twitter Post
• https://t.me/cveNotify/139004 · Telegram Post
• https://vuldb.com/?id.328776 · Note
• https://reddit.com/r/VulnMatter/comments/1o91x4z/resumen_diario_de_vulnerabilidades_17102025 · Reddit Post