PT-2026-114212

Name of the Vulnerable Software and Affected Versions InvoiceShelf versions prior to 2.4.0 Description In PDFConfigurationRequest.php, the gotenberg host setting is only validated as a syntactically valid URL. Subsequently, the loadView function in GotenbergPDFDriver sends a multipart HTTP reques...