Advisories · Technology
sim.
Every CVE that names sim among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Sim before 0.8.14 Confused Deputy in Tool URL Routing Mints an Internal Token for a User-Supplied /api/ Path
- sim
- CWE-441
- CVSS 6.3 Medium
SimStudioAI sim Password Protection deployment.ts weak hash
- sim
- Weak cryptography or TLS
- CVSS 9.3 CriticalCritical · CVSS 9+
Sim Studio AI - Unauthenticated OAuth Token Theft
- sim
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
Sim Studio AI - MongoDB SSRF and Arbitrary Document Deletion
- sim
- Broken access control
- CVSS 6.9 Medium
simstudioai sim CRON Secret internal.ts improper authentication
- sim
- Authentication bypass
- CVSS 5.3 Medium
SimStudioAI sim route.ts server-side request forgery
- sim
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
SimStudioAI sim route.ts server-side request forgery
- sim
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
SimStudioAI sim path traversal
- sim
- Path traversal
- CVSS 5.3 Medium
SimStudioAI sim HTML File route.ts import unrestricted upload
- sim
- Broken access control
- Unrestricted file upload
- CVSS 6.9 Medium
SimStudioAI sim Session route.ts POST missing authentication
- sim
- Authentication bypass
- CVSS 6.9 Medium
SimStudioAI sim route.ts handleLocalFile path traversal
- sim
- Path traversal