CVE-2022-34549

Name of the Vulnerable Software and Affected Versions Sims version 1.0

Description The issue allows attackers to escalate privileges and execute arbitrary commands via a crafted file, exploiting an arbitrary file upload vulnerability in the /uploadServlet component.

Recommendations For Sims version 1.0, consider disabling the /uploadServlet component until a patch is available to prevent exploitation of the arbitrary file upload vulnerability. Restrict access to this component to minimize the risk of privilege escalation and arbitrary command execution.