Information disclosure in Fossbilling
CVE-2026-40495
FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 leak the exact system version through asset cache buster parameters in HTML output, bypassing the `hide_version_public` security setting. The…
Vulnerability class: Information Disclosure
EPSS: 0.003 (19.9th percentile) — read the EPSS interpretation.
Affected products
- Fossbilling — versions < 0.8.0
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_CONFIRM)