CVE-2025-68988: o2oe E-Invoice App Malaysia

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in o2oe E-Invoice App Malaysia einvoiceapp-malaysia allows Retrieve Embedded Sensitive Data.This issue affects E-Invoice App Malaysia: from n/a through <= 1.3.0.

Affected products

• o2oe E-Invoice App Malaysia: up to and including 1.3.0

Published 2025-12-30. Last modified 2026-10-07.