CVE-2025-11842 | Shazwazza Smidge up to 4.5.1 Bundle Version path traversal

October 16, 2025 Yanac

A vulnerability classified as critical has been found in Shazwazza Smidge up to 4.5.1. The impacted element is an unknown function of the component Bundle Handler. The manipulation of the argument Version leads to path traversal.

This vulnerability is referenced as CVE-2025-11842. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More