Skip to content
OpenAdvisories

Package · Packagist

solidinvoice/solidinvoice

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-7vfx-4246-jcfh

    SolidInvoice: IDOR in LiveComponent allows same-company cross-user access to API tokens and notification transport settings

    ## Summary Four authorization bypass vulnerabilities in Symfony LiveComponent actions allow any authenticated user within a company to access, modify, or delete other users' API tokens and notification transport settings. The root cause is that LiveComponent …

    solidinvoice/solidinvoice Packagist