VDE-2026-001

csafCHmettler_toledo_psirt

METTLER TOLEDO: ASP.NET core vulnerability in LabX

view advisory published 2026-03-04

LabX 21.2.12 (formerly known as LabX Cloud 1.2.12) is affected by the ASP.NET core vulnerability CVE-2025-55315.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-55315US—Exploit
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.
02

references

External citations — patches, advisories, analysis.

03

remediations (2)

  • FixedLabX

    Update to the LabX version 21.3.22, which includes a fix for the ASP.NET Core vulnerability CVE-2025-55315

  • FixedLabX Cloud

    Update to the LabX version 21.3.22, which includes a fix for the ASP.NET Core vulnerability CVE-2025-55315

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan