Invoice Ninja

3 CVEs across 2 Invoice Ninja products. Browse Invoice Ninja vulnerabilities, severities, and proof-of-concept exploits.

Invoice Ninja products with known CVEs

ProductCVEs
Invoice Ninja2
Invoice Ninja 51
Invoice Ninja CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-100092025-09-22Incorrect handling of uploaded files in the admin "Restore" function in Invoice Ninja <= 5.11.72 allows attackers with admin credentials to execute arbitrary c…
CVE-2025-87002025-08-26Invoice Ninja's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows local attackers with unprivileged…
CVE-2025-0474High7.72025-01-14Invoice Ninja is vulnerable to authenticated Server-Side Request Forgery (SSRF) allowing for arbitrary file read and network resource requests as the applicati…