PT-2025-3738

CVE-2025-0001

·

Published

2025-01-01

·

Updated

2025-10-23

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Abacus ERP versions prior to 2024.210.16036 Abacus ERP versions prior to 2023.205.15833 Abacus ERP versions prior to 2022.105.15542
Description The issue is an authenticated arbitrary file read vulnerability. This means that an attacker who has valid credentials can potentially read files on the system that they should not have access to.
Recommendations For versions prior to 2024.210.16036, update to version 2024.210.16036 or later. For versions prior to 2023.205.15833, update to version 2023.205.15833 or later. For versions prior to 2022.105.15542, update to version 2022.105.15542 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾