CVE-2023-3655

HIGH 7.5CVE-2023-3655 · Published 03/10/2023 · updated 17/06/2026

In short

CVE-2023-3655 is a HIGH (CVSS 7.5) vulnerability affecting cashit! (cashit).
Chance of exploitation in the next 30 days (EPSS): 0.57%, higher than 47.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cashit! cashit	`≤ 03.a06rks_2023.02.37`	No fix yet

Description

cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by a dangerous methods, that allows to leak the database (system settings, user accounts,...). This vulnerability can be triggered by an HTTP endpoint exposed to the network.

References

doi.org/10.35011/ww2q-d522 · Technical Description
cashit.at · Product

More vulnerabilities in cashit!

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free