CVE-2025-34300

A template injection vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14 via the  ciwweb.pl http://ciwweb.pl/  Perl web application. Exploitation allows an unauthenticated attacker can execute arbitrary commands.

Assigner : disclosure@vulncheck.com

More information : https://sawtoothsoftware.com/resources/software-downloads/lighthouse-studio