CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

RedhatCVE•added 2026/03/31 4:59 a.m.•6 views

CVE-2026-29925

Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery SSRF in CheckDatabaseRequest.php...

7.7CVSS5.9AI score0.00315EPSS

Exploits1References1

Snyk•added 2026/03/30 8:26 p.m.•2 views

Server-side Request Forgery (SSRF)

Overview hillelcoren/invoice-ninja is an Invoices, expenses & time-tracking built with Laravel Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the CheckDatabaseRequest.php process. An attacker can make unauthorized requests to internal or external systems ...

8.8CVSS5.9AI score0.00315EPSS

Exploits1References2

Cvelist•added 2026/03/30 12:0 a.m.•14 views

CVE-2026-29925

Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery SSRF in CheckDatabaseRequest.php...

0.00315EPSS

Exploits1References2

Vulnrichment•added 2026/03/30 12:0 a.m.•1 views

CVE-2026-29925

Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery SSRF in CheckDatabaseRequest.php...

5.9AI score0.00315EPSS

Exploits1References2

CVE•added 2026/03/30 12:0 a.m.•7 views

CVE-2026-29925

Invoice Ninja v5.12.46 and v5.12.48 are affected by a Server-Side Request Forgery (SSRF) in CheckDatabaseRequest.php (CVE-2026-29925). Root cause is input handling in the CheckDatabaseRequest process that allows unintended requests to internal/external systems. Documented impact is the SSRF vulne...

7.7CVSS5.9AI score0.00315EPSS

Exploits1References2Affected Software1