CVE-2026-29925

Published March 30th, 2026

View on NVD ↗

CVSS v3

7.7

HIGH

CVSS v2

N/A

Affected

1

PROJECT

Description

Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery (SSRF) in CheckDatabaseRequest.php.

invoiceninja/invoiceninja

A source-available invoice, quote, project and time-tracking app built with Laravel

GitHub

9.82K