Threats tagged 'ghsa-g7mj-wwxq-p2gr'

A vulnerability in SimStudioAI sim's HTML File Parser component allows unrestricted file upload via manipulation of the Import function's File argument. This issue affects versions up to commit ed9b9ad83f1a7c61f4392787fb51837d34eeb0af. The vulnerability has a CVSS score of 6.1 (medium severity) and requires user interaction to exploit remotely. A patch identified by commit 45372aece5e05e04b417442417416a52e90ba174 is available to remediate the issue. The product uses a rolling release model, so no specific version numbers are provided.