CVE PROGRAM SOURCE RECORD7.3 High

CVE-2025-43948

Codemers KLIMS 1.6.DEV allows Python code injection. A user can provide Python code as an input value for a parameter or qualifier (such as for sorting), which will get executed on

Status: Published
Published: 2025-04-22
Updated: 2025-04-22
Assigning organization: mitre

Description

Codemers KLIMS 1.6.DEV allows Python code injection. A user can provide Python code as an input value for a parameter or qualifier (such as for sorting), which will get executed on the server side.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a n/a

n/aaffected

References

https://de.linkedin.com/company/codemers ↗
https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2025-43948 ↗