SimStudio Unauthenticated OAuth Token Theft Vulnerability

A vulnerability exists in SimStudio versions prior to 0.5.74, specifically in the '/api/auth/oauth/token' endpoint. This vulnerability allows an unauthenticated attacker to bypass authorization checks by using the 'credentialAccountUserId' and 'providerId' parameters. By supplying a user's ID and a provider name, the attacker can obtain OAuth access tokens for that user, effectively stealing credentials for third-party services.

Impact

Exploitation of this vulnerability allows for unauthorized access to OAuth tokens, which can be used to impersonate users and access their third-party service credentials.

Remediation

Users are advised to update to SimStudio version 0.5.74 or later.