Submit #641130: simstudioai https://github.com/simstudioai/sim <=1.0.0 Arbitrary File Deletioninfo

Titelsimstudioai https://github.com/simstudioai/sim <=1.0.0 Arbitrary File Deletion
BeschreibungThe file deletion function performs no security checks on user-controllable file paths, thus allowing attackers to delete arbitrary system files.
Quelle⚠️ https://github.com/simstudioai/sim/issues/959
Benutzer
 ZAST.AI (UID 87884)
Einreichung25.08.2025 12:49 (vor 10 Monaten)
Moderieren01.09.2025 14:38 (7 days later)
StatusAkzeptiert
VulDB Eintrag322116 [SimStudioAI sim bis ed9b9ad83f1a7c61f4392787fb51837d34eeb0af filePath Directory Traversal]
Punkte16

Do you know our Splunk app?

Download it now for free!