Description
InvoicePlane (all versions tested as of December 2024) v.1.6.11 and before contains a remote code execution vulnerability in the upload_file method of the Upload controller.
Critical · 9.8
CVE-2024-56975
EUVD-2024-54327GHSA-2fqc-9m76-ppwc
InvoicePlane (all versions tested as of December 2024) v.1.6.11 and before contains a remote code execution vulnerability in the upload_fil…
Published Mar 28, 2025 · Updated Apr 1, 2025 · Assigned by mitre