Vulnerabilities in InvoiceShelf
11 resultsCVE-2026-55385MEDIUMInvoiceShelf: SSRF via unvalidated Gotenberg PDF renderer host in PDF configurationEPSS 0.6%CVE-2026-55387HIGHInvoiceShelf bulk deletion lacks company scopingEPSS 0.4%CVE-2026-55610HIGHInvoiceShelf has cross-company user read/update IDOR that enables cross-tenant account takeoverEPSS 0.4%CVE-2026-55383HIGHInvoiceShelf: Public EmailLog token type confusion allows cross-company invoice disclosureEPSS 0.4%CVE-2026-55382HIGHInvoiceShelf: Cross-company read/modify/delete of notes via missing company scope in NotePolicy (BOLA/IDOR)EPSS 0.4%CVE-2026-55381HIGHInvoiceShelf: IDOR in InvoiceShelf estimate-to-invoice conversion allows any company user to read and tamper with other companies' estimatesEPSS 0.4%CVE-2026-55386HIGHInvoiceShelf ORDER BY SQL injection through orderByFieldEPSS 0.4%CVE-2026-55384MEDIUMInvoiceShelf trusts client-supplied document totalsEPSS 0.3%CVE-2026-34367HIGHInvoiceShelf: SSRF in Invoice PDF Rendering via Unsanitised HTML in Notes FieldEPSS 0.3%CVE-2026-34366HIGHInvoiceShelf: SSRF in Payment Receipt PDF Rendering via Unsanitised HTML in Notes FieldEPSS 0.2%CVE-2026-34365HIGHInvoiceShelf: SSRF in Estimate PDF Rendering via Unsanitised HTML in Notes FieldEPSS 0.2%