CVE-2025-27980: Oldmoon Cashbook

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

cashbook v4.0.3 has an arbitrary file read vulnerability in /api/entry/flow/invoice/show?invoice=.

Affected products

• Oldmoon Cashbook: version 4.0.3 only

Published 2025-04-15. Last modified 2026-06-17.