CVE-2025-10097
CVE-2025-10097 · SimStudioAI sim route.ts code injection
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
A vulnerability was identified in SimStudioAI sim up to 1.0.0. This impacts an unknown function of the file apps/sim/app/api/function/execute/route.ts. The manipulation of the argument code leads to code injection. The attack is possible to be carried out remotely.
CVSS 5.3 · Moyenne · EPSS 0,8%
- Publication
- Mise à jour
Pile logicielle: node