PT-2022-22202 · Sims · Sims

Mbslznyo · Published 2022-07-27 · Updated 2022-08-03 · CVE-2022-34551

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sims version 1.0

Description The issue allows path traversal when downloading attachments.

Recommendations For Sims version 1.0, consider restricting access to attachment downloads until a patch is available.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-34551

Affected Products

Sims

References · 4

• 🔥 https://github.com/rawchen/sims/issues/7 · Exploit
• https://osv.dev/vulnerability/CVE-2022-34551 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-34551 · Security Note
• http://cwe.mitre.org/data/definitions/23.html · Note