CVE-2025-43951

Critical CVSS: 9.8

LabVantage before LV 8.8.0.13 HF6 allows local file inclusion. Authenticated users can retrieve arbitrary files from the environment via the objectname request parameter.

Vendor

Product

CWE

CWE-73

Yayın Tarihi

2025-04-22 18:16:01

Güncelleme

2025-04-23 14:15:30

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-73 CRITICAL 2025

Referanslar

https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2025-43951 https://www.labvantage.com/informatics/lims/