提交 #640821: simstudioai sim latest Server-side request forgery
| 标题 | simstudioai sim latest Server-side request forgery |
|---|---|
| 描述 | The GET function in the components apps/sim/app/api/proxy/route.ts and apps/sim/app/api/proxy/image/route.ts does not filter and judge the parameters in the request, resulting in an SSRF security issue. |
| 来源 | ⚠️ https:/ |
| 用户 | 0x1f (UID 89432) |
| 提交 | 2025-08-24 13時02分 (9 月前) |
| 管理 | 2025-09-01 16時52分 (8 days later) |
| 状态 | 已接受 |
| VulDB条目 | 322129 [SimStudioAI sim 直到 51b1e97fa22c48d144aef75f8ca31a74ad2cfed2 route.ts 权限提升] |
| 积分 | 17 |