Template Injection Vulnerability in Sawtooth Software's Lighthouse Studio (CVE-2025-34300)

This module exploits a template injection vulnerability in the Sawtooth Software Lighthouse Studio's ciwweb.pl web application. The application fails to properly sanitize user input within survey templates, allowing unauthenticated attackers to inject and execute arbitrary Perl commands on the...

📄 Sawtooth Software Lighthouse Studios Template Injection

This Metasploit module exploits a template injection vulnerability in the Sawtooth Software Lighthouse Studios ciwweb.pl web application. The application fails to properly sanitize user input within survey templates, allowing unauthenticated attackers to inject and execute arbitrary Perl commands...

Exploit for CVE-2025-34300

Sawtooth Lighthouse Studio has a template injection vulnerabilit...

Malicious code in lighthouse-quinoa-v6vv (npm)

The package lighthouse-quinoa-v6vv was found to contain malicious code...

Malicious code in lighthouse-date-hf2i (npm)

The package lighthouse-date-hf2i was found to contain malicious code...

Malicious code in turnip-lighthouse-3s9u (npm)

The package turnip-lighthouse-3s9u was found to contain malicious code...

MAL-2025-25268 Malicious code in lighthouse-beetroot-3esx (npm)

The package lighthouse-beetroot-3esx was found to contain malicious code...

Malicious code in lighthouse-vinegar-neu2 (npm)

The package lighthouse-vinegar-neu2 was found to contain malicious code...

MAL-2025-25272 Malicious code in lighthouse-vinegar-neu2 (npm)

The package lighthouse-vinegar-neu2 was found to contain malicious code...

MAL-2025-25271 Malicious code in lighthouse-quinoa-v6vv (npm)

The package lighthouse-quinoa-v6vv was found to contain malicious code...

MAL-2025-25270 Malicious code in lighthouse-date-hf2i (npm)

The package lighthouse-date-hf2i was found to contain malicious code...

MAL-2025-37324 Malicious code in turnip-lighthouse-3s9u (npm)

The package turnip-lighthouse-3s9u was found to contain malicious code...

MAL-2025-21838 Malicious code in grape-lighthouse-8yb7 (npm)

The package grape-lighthouse-8yb7 was found to contain malicious code...

Malicious code in juliet-lighthouse-il5w (npm)

The package juliet-lighthouse-il5w was found to contain malicious code...

Malicious code in lighthouse-beetroot-3esx (npm)

The package lighthouse-beetroot-3esx was found to contain malicious code...

Malicious code in lighthouse-beetroot-uw5y (npm)

The package lighthouse-beetroot-uw5y was found to contain malicious code...

Malicious code in grape-lighthouse-8yb7 (npm)

The package grape-lighthouse-8yb7 was found to contain malicious code...

MAL-2025-24015 Malicious code in juliet-lighthouse-il5w (npm)

The package juliet-lighthouse-il5w was found to contain malicious code...

MAL-2025-25269 Malicious code in lighthouse-beetroot-uw5y (npm)

The package lighthouse-beetroot-uw5y was found to contain malicious code...

VulnCheck KEV: CVE-2025-34300

A template injection vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14 via the ciwweb.pl http://ciwweb.pl/ Perl web application. Exploitation allows an unauthenticated attacker can execute arbitrary commands...