high8.8
CVE-2022-34549
Sims v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /uploadServlet.
Impact
Sims v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /uploadServlet. This vulnerability allows attackers to escalate privileges and execute arbitrary commands via a crafted file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sims Project | Sims | Version 1.0 |