← Database

CVE-2025-27980

MEDIUM CVSS: 6.5 Published: 2025-04-15 Modified: 2026-06-17

Description

cashbook v4.0.3 has an arbitrary file read vulnerability in /api/entry/flow/invoice/show?invoice=.

Affected Platforms

Oldmoon Cashbook

Weakness Type

CWE-200

References