PT-2025-36480 · Unknown · Simstudioai Sim

Zast.Ai

·

CVE-2025-10096

·

Publicado

2025-09-08

·

Atualizado

2025-11-14

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions: SimStudioAI sim versions up to 1.0.0
Description: A vulnerability exists in SimStudioAI sim that allows for server-side request forgery. The issue is related to the manipulation of the filePath argument within a file located at apps/sim/app/api/files/parse/route.ts. The attack can be executed remotely. The exploit has been publicly disclosed.
Recommendations: Apply patch 3424a338b763115f0269b209e777608e4cd31785 to resolve this issue.

Exploit

Correção

SSRF

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2025-10096

Produtos afetados

Simstudioai Sim