Medium · 6.5 CVE-2025-27980 EUVD-2025-10964GHSA-mpvr-j99q-8c2v

cashbook v4.0.3 has an arbitrary file read vulnerability in /api/entry/flow/invoice/show?invoice=.

Published Apr 15, 2025 · Updated Apr 15, 2025 · Assigned by mitre

Description

cashbook v4.0.3 has an arbitrary file read vulnerability in /api/entry/flow/invoice/show?invoice=.

References

https://blog.csdn.net/qq_52469895/article/details/145496958?sharetype=blogdetail&sharerId=145496958&sharerefer=PC&sharesource=qq_52469895&spm=1011.2480.3001.8118