CVE-2025-8744

CVE-2025-8744 affects CesiumLab Web prior to version 4.1. The vulnerability is an SQL injection in the /lodmodels/ code path caused by improper handling of the ID parameter, allowing a remote attacker to manipulate queries. Public exploits have been disclosed. The issue is confirmed across multip...