CVE-2025-43947

Codemers KLIMS 1.6.DEV lacks a proper access control mechanism, allowing a normal KLIMS user to perform all the actions that an admin can perform, such as modifying the configuration, creating a user, uploading files, etc...

CVE-2025-43947

creationtimestamp| type| source ---|---|--- 2025-04-22 21:04:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12975 2025-04-22 21:09:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lngln2n5b52l 2025-04-22 22:35:22+00:00| seen|...

CVE-2025-43947

Codemers KLIMS version 1.6.DEV , a laboratory information management system, is vulnerable to an improper access control mechanism (CWE-284). This flaw allows a user with normal privileges to perform restricted administrative actions , such as modifying system configurations, creating new users, ...

CVE-2025-43947

Codemers KLIMS 1.6.DEV lacks a proper access control mechanism, allowing a normal KLIMS user to perform all the actions that an admin can perform, such as modifying the configuration, creating a user, uploading files, etc...

CVE-2025-43947

Codemers KLIMS 1.6.DEV lacks a proper access control mechanism, allowing a normal KLIMS user to perform all the actions that an admin can perform, such as modifying the configuration, creating a user, uploading files, etc...