Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/06 12:00 a.m.•1 views

CVE-2026-42331: Missing Authentication for Critical Function

FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the Guest API invoice/update endpoint is missing an authorization check present in other invoice-related endpoints, allowing an unauthenticated user with knowledge of an invoice hash to modify the...

7.7CVSS5.8AI score0.00419EPSS
SaveExploits0References3
Rows per page
Query Builder