Lucene search
+L

1 matches found

OSV
OSV
added 2026/07/06 9:00 p.m.9 views

CVE-2026-42331 FOSSBilling missing authorization in guest Invoice API endpoints

FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the Guest API invoice/update endpoint is missing an authorization check present in other invoice-related endpoints, allowing an unauthenticated user with knowledge of an invoice hash to modify the...

7.7CVSS6AI score
SaveExploits0References3
Rows per page
Query Builder