CVE-2018-20614: Cim Project Cim

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

public\install\install.php in CIM 0.9.3 allows remote attackers to reload the product via the public/install/#/step3 URI.

Affected products

• Cim Project Cim: version 0.9.3 only

Published 2018-12-30. Last modified 2026-06-17.