CVE-2025-4037

code-projects ATM Banking moneyWithdraw logic error

Medium · published April 28, 2025

CVSS v4.0
4.8
EPSS
0%
Percentile
22.9
In the wild
Unconfirmed
What it is

A vulnerability was found in code-projects ATM Banking 1.0. It has been classified as critical. Affected is the function moneyDeposit/moneyWithdraw. The manipulation leads to business logic errors. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00313 · 22.9th percentile
Published
2025-04-28T20:31Z
EPSS history
Timeline
  • 28 APR 20:31Z
    code-projects ATM Banking moneyWithdraw logic error
    cvelistv5