CVE-2026-122158

A security flaw has been discovered in InvoiceShelf up to 2.4.3/3.0.0-alpha.3. Affected by this issue is the function MemberService::create of the file app/Domains/Accounts/Application/MemberService.php. Performing a manipulation of the argument companies.id/companies.role results in improper...

CVE-2026-122158 InvoiceShelf MemberService.php create access control

A security flaw has been discovered in InvoiceShelf up to 2.4.3/3.0.0-alpha.3. Affected by this issue is the function MemberService::create of the file app/Domains/Accounts/Application/MemberService.php. Performing a manipulation of the argument companies.id/companies.role results in improper...

CVE-2026-122158 InvoiceShelf MemberService.php create access control

A security flaw has been discovered in InvoiceShelf up to 2.4.3/3.0.0-alpha.3. Affected by this issue is the function MemberService::create of the file app/Domains/Accounts/Application/MemberService.php. Performing a manipulation of the argument companies.id/companies.role results in improper...

CVE-2026-122158

A security flaw in InvoiceShelf (versions up to 2.4.3/3.0.0-alpha.3) allows for improper access controls due to a vulnerability in the MemberService::create function within the app/Domains/Accounts/Application/MemberService.php file. By manipulating the companies[].id or companies[].role argument...

EUVD-2026-117210

A security flaw has been discovered in InvoiceShelf up to 2.4.3/3.0.0-alpha.3. Affected by this issue is the function MemberService::create of the file app/Domains/Accounts/Application/MemberService.php. Performing a manipulation of the argument companies.id/companies.role results in improper...

PT-2026-137314

A security flaw has been discovered in InvoiceShelf up to 2.4.3/3.0.0-alpha.3. Affected by this issue is the function MemberService::create of the file app/Domains/Accounts/Application/MemberService.php. Performing a manipulation of the argument companies.id/companies.role results in improper...