PT-2025-35519
CVE-2025-9805
·
Published
2025-09-02
·
Updated
2025-11-14
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
SimStudioAI versions prior to 51b1e97fa22c48d144aef75f8ca31a74ad2cfed2
Description
A server-side request forgery issue exists due to unknown processing within the file
apps/sim/app/api/proxy/image/route.ts. The attack can be performed remotely. The exploit has been made public.Recommendations
Apply patch 3424a338b763115f0269b209e777608e4cd31785 to resolve this issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾