Product by InvoiceShelf

    InvoiceShelf

    11 known vulnerabilities in InvoiceShelf (InvoiceShelf), 0 of them actively exploited (CISA KEV).

    Key figures

    11

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in InvoiceShelf (InvoiceShelf)
    HighCVE-2026-55610

    InvoiceShelf has cross-company user read/update IDOR that enables cross-tenant account takeover

    		8.7
    MediumCVE-2026-55385

    InvoiceShelf: SSRF via unvalidated Gotenberg PDF renderer host in PDF configuration

    		6.8
    HighCVE-2026-55383

    InvoiceShelf: Public EmailLog token type confusion allows cross-company invoice disclosure

    		8.2
    HighCVE-2026-55387

    InvoiceShelf bulk deletion lacks company scoping

    		—
    HighCVE-2026-55382

    InvoiceShelf: Authorization Bypass Through User-Controlled Key

    		7.6
    HighCVE-2026-55381

    InvoiceShelf: Authorization Bypass Through User-Controlled Key

    		7.1
    HighCVE-2026-55386

    InvoiceShelf ORDER BY SQL injection through orderByField

    		—
    MediumCVE-2026-55384

    InvoiceShelf trusts client-supplied document totals

    		—
    HighCVE-2026-34367

    InvoiceShelf: SSRF in Invoice PDF Rendering via Unsanitised HTML in Notes Field

    		7.6
    HighCVE-2026-34365

    InvoiceShelf: SSRF in Estimate PDF Rendering via Unsanitised HTML in Notes Field

    		7.6
    HighCVE-2026-34366

    InvoiceShelf: SSRF in Payment Receipt PDF Rendering via Unsanitised HTML in Notes Field

    		7.6

    All products by InvoiceShelf