CVE-2025-0001

Abacus ERP is versions older than 2024.210.16036, 2023.205.15833, 2022.105.15542 are affected by an authenticated arbitrary file read vulnerability.

Score

CVSS 3.1 6.5 Medium

Status

Deferred - vulnerability@ncsc.ch

Published

2025-02-17

Last modified

2025-02-18

Weaknesses

CWE-36

Affected products

• Abacus (Abacus Research Ag)

References

• https://borelenzo.github.io/stuff/2025/02/15/CVE-2025-0001.html