5 matches found
CVE-2024-56975
InvoicePlane all versions tested as of December 2024 v.1.6.11 and before contains a remote code execution vulnerability in the uploadfile method of the Upload controller...
CVE-2024-56975
InvoicePlane all versions tested as of December 2024 v.1.6.11 and before contains a remote code execution vulnerability in the uploadfile method of the Upload controller...
CVE-2024-56975
InvoicePlane all versions tested as of December 2024 v.1.6.11 and before contains a remote code execution vulnerability in the uploadfile method of the Upload controller...
CVE-2024-56975
The self-hosted open source application InvoicePlane is vulnerable to remote code execution (RCE) in versions v.1.6.11 and before . The root cause is an unrestricted upload of file with dangerous type within the upload_file method of the Upload controller . Exploitation of this flaw could allow a...
