CVE-2026-125365 | harung1993 DollarDollar up to 4.4 add_expense account_id/destination_account_id/group_id authorization

A vulnerability marked as problematic has been reported in harung1993 DollarDollar up to 4.4. The impacted element is the function add_expense. The manipulation of the argument account_id/destination_account_id/group_id leads to missing authorization. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is documented as CVE-2026-125365. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More