Description
A vulnerability was found in SimStudioAI sim up to 51b1e97fa22c48d144aef75f8ca31a74ad2cfed2. This issue affects some unknown processing of the file apps/sim/app/api/proxy/image/route.ts. The manipulation results in server-side request forgery. The attack may be performed from remote. The exploit has been made public and could be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The patch is identified as 3424a338b763115f0269b209e777608e4cd31785. Applying a patch is advised to resolve this issue.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SimStudioAI sim
51b1e97fa22c48d144aef75f8ca31a74ad2cfed2affected
References
- https://vuldb.com/?id.322129 ↗
- https://vuldb.com/?ctiid.322129 ↗
- https://vuldb.com/?submit.640821 ↗
- https://github.com/simstudioai/sim/issues/1128 ↗
- https://github.com/simstudioai/sim/issues/1128#issuecomment-3226867869 ↗
- https://github.com/simstudioai/sim/issues/1128#issue-3349260976 ↗
- https://github.com/simstudioai/sim/commit/3424a338b763115f0269b209e777608e4cd31785 ↗