CVE-2025-4037

4.8 mediumEPSS 0.3%

Medium (4.8) in fabian atm banking. EPSS 0.3% chance of exploitation in the next 30 days.

A vulnerability was found in code-projects ATM Banking 1.0. It has been classified as critical. Affected is the function moneyDeposit/moneyWithdraw. The manipulation leads to business logic errors. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

Severity

CVSS 4.0

4.8 medium

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWE: CWE-840
Published: 2025-04-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fabian:atm_banking

References

https://code-projects.org/
https://github.com/zzzxc643/cve/blob/main/ATM_Banking.md
https://vuldb.com/?ctiid.306402
https://vuldb.com/?id.306402
https://vuldb.com/?submit.559303

Check your stack JSON