VulnSocial

CVE-2025-0001

LOWCVSS 6.5 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Abacus ERP is versions older than 2024.210.16036, 2023.205.15833, 2022.105.15542 are affected by an authenticated arbitrary file read vulnerability.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-36

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-11-07: 211-07
Referenced assets1 URL
Full discourse2 posts
  • 🇰🇷Dave_Joe_9377🇦🇺@Dave_Joe_9377

    CVE-2025-0001 | A login is not a universal file key Being allowed into an office should not mean being allowed to open every filing cabinet. Abacus ERP had an authenticated arbitrary file read vulnerability in versions older than 2024.210.16036, 2023.205.15833 and 2022.105.15542. The key distinction is authenticated: access to an account does not remove the need to enforce file-access boundaries. The record does not describe remote code execution. The lesson: authentication answers who you are; authorization limits what you can read. Check the relevant release line and vendor updates.

    100014
    3.2K followersView on X
  • 🇰🇷Dave_Joe_9377🇦🇺@Dave_Joe_9377

    Abacus ERP: authenticated arbitrary file read. The record lists versions older than 2024.210.16036, 2023.205.15833 and 2022.105.15542. Check the release line used in your deployment. Official record: https://github.com/CVEProject/cvelistV5/blob/main/cves/2025/0xxx/CVE-2025-0001.json

    000013
    3.2K followersView on X

Explore more

Back to dashboard