Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-27980

cashbook v4.0.3 has an arbitrary file read vulnerability in /api/entry/flow/invoice/show?invoice=.