CVE-2025-34300 PoC — Sawtooth Software Lighthouse Studio < 9.16.14 Pre-Authentication RCE

Source

https://github.com/jisi-001/CVE-2025-34300POC

Associated Vulnerability

Title: Sawtooth Software Lighthouse Studio < 9.16.14 Pre-Authentication RCE (CVE-2025-34300)
Description:A template injection vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14 via the ciwweb.pl http://ciwweb.pl/ Perl web application. Exploitation allows an unauthenticated attacker can execute arbitrary commands.

Description

Sawtooth Lighthouse Studio存在模板注入漏洞CVE-2025-34300

Readme

# Sawtooth Lighthouse Studio存在模板注入漏洞CVE-2025-34300

参数：

```
options:
  -h, --help            show this help message and exit
  -u URL, --url URL     请输入待检测的URL
  -f FILE, --file FILE  请输入一行一个URL的文件地址
```

举例：

```
单个检测：
python .\CVE-2025-34300POC.py -u URL
批量检测;
python .\CVE-2025-34300POC.py -f urls.txt
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →