CVE-2025-43948

creationtimestamp| type| source ---|---|--- 2025-04-22 21:04:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12976 2025-04-22 21:09:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lngln2qcq52y 2025-04-22 22:35:23+00:00| seen|...

CVE-2025-43948

Codemers KLIMS version 1.6.DEV is vulnerable to Python code injection . The flaw occurs when a user provides Python code as an input value for a parameter or qualifier , such as those used for sorting . This allows the injected code to be executed on the server side . As a workaround, it is recom...

CVE-2025-43948

Codemers KLIMS 1.6.DEV allows Python code injection. A user can provide Python code as an input value for a parameter or qualifier such as for sorting, which will get executed on the server side...