High severity7.3NVD Advisory· Published Apr 22, 2025· Updated Apr 15, 2026
CVE-2025-43948
CVE-2025-43948
Description
Codemers KLIMS 1.6.DEV allows Python code injection. A user can provide Python code as an input value for a parameter or qualifier (such as for sorting), which will get executed on the server side.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.