Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-27980

cashbook v4.0.3 has an arbitrary file read vulnerability in /api/entry/flow/invoice/show?invoice=.

Published

2025-04-15T15:16:07.940

Last Modified

2025-05-22T15:53:24.823

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses

Type: Secondary
CWE-200

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	oldmoon	cashbook	4.0.3	Yes

References

https://blog.csdn.net/qq_52469895/article/details/145496958?sharetype=blogdetail&sharerId=145496958&sharerefer=PC&sharesource=qq_52469895&spm=1011.2480.3001.8118 Exploit, Third Party Advisory ([email protected])