Invoice Ninja 代码问题漏洞

Invoice Ninja is an available invoice, quote, project and time tracking application built with Laravel by Invoice Ninja open source. A code issue vulnerability exists in Invoice Ninja versions 5.8.56 through 5.11.23. An attacker can exploit the vulnerability to read arbitrary files and request...

PT-2025-3907 · Unknown · Invoice Ninja

Name of the Vulnerable Software and Affected Versions: Invoice Ninja versions 5.8.56 through 5.11.23 Description: Invoice Ninja is vulnerable to authenticated Server-Side Request Forgery SSRF, allowing for arbitrary file read and network resource requests as the application user. This issue enabl...