PT-2025-32418 · Unknown · Cesiumlab Web

Threez · Published 2025-08-08 · Updated 2025-08-09 · CVE-2025-8744

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CesiumLab Web versions prior to 4.1

Description A critical vulnerability exists in CesiumLab Web. The issue affects unknown code within the /lodmodels/ file and allows for SQL injection through manipulation of the ID argument. This attack can be initiated remotely. The exploit has been publicly disclosed, and the vendor was informed but did not respond.

Recommendations Update CesiumLab Web to version 4.1 or later.

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-8744

Affected Products

Cesiumlab Web

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-8744 · Security Note
• https://twitter.com/CVEnew/status/1953967414862876833 · Twitter Post
• https://vuldb.com/?ctiid.319240 · Note
• https://t.me/CVEtracker/29558 · Telegram Post
• https://t.me/cveNotify/131529 · Telegram Post
• https://vuldb.com/?submit.616911 · Note
• https://vuldb.com/?id.319240 · Note