CVE-2025-43948

creationtimestamp| type| source ---|---|--- 2025-04-22 21:04:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12976 2025-04-22 21:09:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lngln2qcq52y 2025-04-22 22:35:23+00:00| seen|...

CVE-2025-43948

The Codemers KLIMS laboratory information management system, version 1.6.DEV , is vulnerable to Python code injection (CWE-77). An attacker can provide malicious Python code as an input value for a parameter or qualifier, such as those used for sorting. This flaw allows for the server-side execut...

CVE-2025-43948

Codemers KLIMS 1.6.DEV allows Python code injection. A user can provide Python code as an input value for a parameter or qualifier such as for sorting, which will get executed on the server side...