Отправить #641130: simstudioai https://github.com/simstudioai/sim <=1.0.0 Arbitrary File DeletionИнформация

Названиеsimstudioai https://github.com/simstudioai/sim <=1.0.0 Arbitrary File Deletion
ОписаниеThe file deletion function performs no security checks on user-controllable file paths, thus allowing attackers to delete arbitrary system files.
Источник⚠️ https://github.com/simstudioai/sim/issues/959
Пользователь
 ZAST.AI (UID 87884)
Представление25.08.2025 12:49 (10 месяцы назад)
Модерация01.09.2025 14:38 (7 days later)
Статуспринято
Запись VulDB322116 [SimStudioAI sim до ed9b9ad83f1a7c61f4392787fb51837d34eeb0af filePath обход каталога]
Баллы16

Do you know our Splunk app?

Download it now for free!