PT-2025-35515
CVE-2025-9800
·
Publicado
2025-09-01
·
Atualizado
2026-10-01
Descrição por
CVSS 3.1
6.3
MédiaMétricasAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
SimStudioAI (affected versions not specified)
Description
A weakness exists in the function
Import of the file apps/sim/app/api/files/upload/route.ts within the HTML File Parser component. Manipulation of the File argument can lead to unrestricted upload, potentially allowing remote exploitation. The exploit has been made publicly available.Recommendations
Apply patch 45372aece5e05e04b417442417416a52e90ba174 to remediate this issue.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾