Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

Promptcraft Forge Studio does not block malicious URLs

CVE-2025-58361 · published 1 year ago
Summary

Promptcraft Forge Studio's URL check is incomplete, allowing attackers to inject malicious code through URLs. This could let hackers execute scripts on your website. Since there's no fix yet, it's a good idea to avoid using user-controlled URLs in the application until a patch is released.

Original advisory text
Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered applications. All versions contain an non-exhaustive URL scheme check that does not protect against XS...
Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered applications. All versions contain an non-exhaustive URL scheme check that does not protect against XSS. User-controlled URLs pass through src/utils/validation.ts, but the check only strips `javascript:` and a few patterns. `data:` URLs (for example data:image/svg+xml,…) still pass. If a sanitized value is used in href/src, an attacker can execute a script. There is currently no fix for this issue.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
9.3 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-20Improper Input Validation
CWE-79Cross-site Scripting (XSS)
CWE-184Incomplete List of Disallowed Inputs
Timeline
Published4 Sep 2025
Updated3 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-58361 · NVD
Track software like this
Free during beta