authenticated arbitrary file read vulnerability

6.5 CVSS

Vulnerability Description

Abacus ERP is versions older than 2024.210.16036, 2023.205.15833, 2022.105.15542 are affected by an authenticated arbitrary file read vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-0001

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Borel Enzo (testeurdestylos)
Nicolas Hugues

References

https://borelenzo.github.io/stuff/2025/02/15/CVE-2025-0001.html

More from Abacus Research AG

View All →

CVE-2022-1065

Multi Factor Authentication Bypass in various versions of Abacus ERP

High 8.1

Affected Vendor

Abacus Research AG

View all reports →

Affected Software

Abacus

Vulnerable Versions:

Timeline

Official Publish: February 17th, 2025

Last Modified: February 18th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-36

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.