Summary
LabX 21.2.12 (formerly known as LabX Cloud 1.2.12) is affected by the ASP.NET core vulnerability CVE-2025-55315.
Details
Impact
HTTP Request Smuggling flaw in ASP.NET Core allows an attacker to achieve an authenticity bypass by sending ambiguous requests that circumvent access controls. This directly leads to a high impact on confidentiality. Furthermore, integrity is severely compromised because the attacker can smuggle malicious commands, enabling injection attacks and unauthorized data manipulation.
Remediation
Update to LabX version 21.3.22, which includes a fix for the ASP.NET Core vulnerability CVE-2025-55315.
Vulnerabilities 1
-
Critical 9.9
ASP.NET Security Feature Bypass Vulnerability
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.
Revision history
-
#1.0.0
Initial revision
References
-
Product security website of METTLER TOLEDO
https://www.mt.com/ph/en/home/site_content/product-security.html
-
CERT@VDE Security Advisories for METTLER TOLEDO
https://certvde.com/en/advisories/vendor/mettler-toledo/
-
VDE-2026-001: METTLER TOLEDO: ASP.NET core vulnerability in LabX - HTML
https://certvde.com/en/advisories/VDE-2026-001/