PT-2025-17583 · Labvantage · Labvantage

Nirmala Sriramulu · Published 2025-04-22 · Updated 2025-04-24 · CVE-2025-43951

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LabVantage versions prior to 8.8.0.13 HF6

Description The issue allows local file inclusion, enabling authenticated users to retrieve arbitrary files from the environment. This is achieved via the objectname request parameter.

Recommendations For versions prior to 8.8.0.13 HF6, update to version 8.8.0.13 HF6 or later to resolve the issue. As a temporary workaround, consider restricting access to the objectname request parameter to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-73

Related Identifiers

CVE-2025-43951

Affected Products

Labvantage

References · 7

• 🔥 https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2025-43951 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-43951 · Security Note
• https://t.me/cvetracker/22158 · Telegram Post
• https://twitter.com/cybercronai/status/1915220529503428697 · Twitter Post
• https://twitter.com/CVEnew/status/1914738574185922615 · Twitter Post
• https://t.me/cvedetector/23549 · Telegram Post
• https://labvantage.com/informatics/lims · Note