CVE-2026-29925

HIGH CVSS: 7.7 Published: 2026-03-30 Modified: 2026-06-17

Description

Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery (SSRF) in CheckDatabaseRequest.php.

Affected Platforms

Invoiceninja Invoice Ninja

Weakness Type

CWE-918

References