CVE-2025-43947

Codemers KLIMS 1.6.DEV lacks a proper access control mechanism, allowing a normal KLIMS user to perform all the actions that an admin can perform, such as modifying the configuration, creating a user, uploading files, etc.

Score

CVSS 3.1 7.3 High

Status

Analyzed - cve@mitre.org

Published

2025-04-22

Last modified

2025-04-22

Weaknesses

CWE-284

Affected products

• Klims (Codemers)

References

• https://de.linkedin.com/company/codemers
• https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2025-43947