← Back

CVE-2025-27980

nvd nist
Published: Apr 15, 2025Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
Exploitability: 2.2 / Impact: 4.2
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

cashbook v4.0.3 has an arbitrary file read vulnerability in /api/entry/flow/invoice/show?invoice=.

Affected (1)

Products: Oldmoon: Cashbook
Oldmoon
1 product
Cashbook
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Cashbook
Version 4.0.3

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (1)

Source: cve@mitre.org
ExploitThird Party Advisory

Timeline

No history available yet.