VULNERABILITY INTELLIGENCE

CVE-2026-47127

CVSS score6.5 MEDIUM

EPSS probability0.40%

CISA KEVNot currently listed

Published2026-08-07

Last modified2026-09-09

Description

Ghostfolio is an open source wealth management software. Prior to version 3.4.0, Ghostfolio's Stripe checkout success-URL handler at `GET /api/v1/subscription/stripe/callback?checkoutSessionId=<id>` retrieves the Stripe Checkout Session by ID and unconditionally grants a Premium subscription to the …