What’s Vulnerable › Vulnerabilities

CVE-2025-27980

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-04-15 · updated 2026-06-17
• Weakness: CWE-200

Description

cashbook v4.0.3 has an arbitrary file read vulnerability in /api/entry/flow/invoice/show?invoice=.

Affected products

• Oldmoon Cashbook: 4.0.3

References

• https://blog.csdn.net/qq_52469895/article/details/145496958?sharetype=blogdetail&sharerId=145496958&sharerefer=PC&sharesource=qq_52469895&spm=1011.2480.3001.8118

Get alerted when CVE-2025-27980 or the next vulnerability affects your stack