medium6.5
CVE-2025-27980
cashbook v4.0.3 has an arbitrary file read vulnerability in /api/entry/flow/invoice/show?invoice=.
Impact
cashbook v4.0.3 has an arbitrary file read vulnerability in /api/entry/flow/invoice/show?invoice=.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oldmoon | Cashbook | Version 4.0.3 |