Orta CVSS 5.3
CVE-2025-48985: Ai: hatalı girdi doğrulama
Açıklama (NVD)
A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade. More details: https://vercel.com/changelog/cve-2025-48985-input-validation-bypass-on-ai-sdk
Özet bilgiler
- Ürün
- Vercel Ai
- CVSS v3.1
- 5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - EPSS
- %0,28 (yüzdelik 21)
- CWE
- CWE-20
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| vercel-ai | — | — | 5.0.52 |
| vercel-ai | 5.1.0 | 5.1.0 | — |
| vercel-ai | 5.1.0 | 5.1.0 | — |
| vercel-ai | 5.1.0 | 5.1.0 | — |
| vercel-ai | 5.1.0 | 5.1.0 | — |
| vercel-ai | 5.1.0 | 5.1.0 | — |
| vercel-ai | 5.1.0 | 5.1.0 | — |
| vercel-ai | 5.1.0 | 5.1.0 | — |
| vercel-ai | 5.1.0 | 5.1.0 | — |
| vercel-ai | 5.1.0 | 5.1.0 | — |