Description
Codemers KLIMS 1.6.DEV allows Python code injection. A user can provide Python code as an input value for a parameter or qualifier (such as for sorting), which will get executed on the server side.
High · 7.3
CVE-2025-43948
EUVD-2025-12263GHSA-q6v5-58gv-cxgm
Codemers KLIMS 1.6.DEV allows Python code injection. A user can provide Python code as an input value for a parameter or qualifier (such as…
Published Apr 22, 2025 · Updated Apr 22, 2025 · Assigned by mitre