| 제목 | sims Latest Unauthorized Arbitrary File Download Vulnerability |
|---|
| 설명 | Rawchen/sims has an unauthorized arbitrary file download vulnerability. This vulnerability is due to the lack of permission management for the DownloadServlet route of sims-master/src/web/servlet/file/DownloadServlet.java, and the file name entered by the user is not filtered, resulting in the attacker to download important files, database configuration files, etc. of any system of the server without permission through the vulnerability. |
|---|
| 원천 | ⚠️ https://github.com/yingxiujie/cve/issues/3 |
|---|
| 사용자 | yingxiujie (UID 96521) |
|---|
| 제출 | 2026. 04. 06. AM 06:57 (5 개월 ago) |
|---|
| 모더레이션 | 2026. 04. 25. PM 04:05 (19 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 205148 [Sims 1.0 Attachment Download 디렉토리 순회] |
|---|
| 포인트들 | 0 |
|---|