SecBoard
Zurück zur CVE-Übersicht

CVE-2025-43948

HIGH(7.3)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Risk Signal Score18/100 — NIEDRIG
  • CVSS 7.3 — Hoch

EPSS-Score

0%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

7.3

Technische Schwere

Beschreibung

Codemers KLIMS 1.6.DEV allows Python code injection. A user can provide Python code as an input value for a parameter or qualifier (such as for sorting), which will get executed on the server side.

Referenzen