VULNERABILITY INTELLIGENCE

CVE-2025-4037

CVSS score4.4 MEDIUM

EPSS probability0.31%

CISA KEVNot currently listed

Published2025-04-28

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Description

A vulnerability was found in code-projects ATM Banking 1.0. It has been classified as critical. Affected is the function moneyDeposit/moneyWithdraw. The manipulation leads to business logic errors. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

Weakness classification

cna@vuldb.com: CWE-840
nvd@nist.gov: NVD-CWE-noinfo

Primary references

cna@vuldb.com — Product
cna@vuldb.com — Exploit, Mitigation, Third Party Advisory
cna@vuldb.com — Permissions Required
cna@vuldb.com — Third Party Advisory, VDB Entry
cna@vuldb.com — Third Party Advisory, VDB Entry
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Mitigation, Third Party Advisory