Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/07/06 9:0 p.m.37 views

CVE-2026-42331 FOSSBilling missing authorization in guest Invoice API endpoints

FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the Guest API invoice/update endpoint is missing an authorization check present in other invoice-related endpoints, allowing an unauthenticated user with knowledge of an invoice hash to modify the...

7.7CVSS0.00247EPSS
SaveExploits0References1
Rows per page
Query Builder