CVE-2024-56975 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

InvoicePlane (all versions tested as of December 2024) v.1.6.11 and before contains a remote code execution vulnerability in the upload_file method of the Uploa…
Critical CVSS: 9.8

CVE-2024-56975

InvoicePlane (all versions tested as of December 2024) v.1.6.11 and before contains a remote code execution vulnerability in the upload_file method of the Upload controller.
Vendor
Invoiceplane
Product
Invoiceplane
CWE
CWE-434
Yayın Tarihi
2025-03-28 21:15:17
Güncelleme
2025-04-14 16:50:35
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-434 Invoiceplane CRITICAL Invoiceplane 2025

Referanslar

https://github.com/InvoicePlane/InvoicePlane/pull/1127 https://github.com/InvoicePlane/InvoicePlane/pull/1166