| Package | Affected versions | Patched versions |
|---|---|---|
| invoiceplane | = 1.5.11 |
In InvoicePlane 1.5.11 a misconfigured web server allows unauthenticated directory listing and file download. Allowing an attacker to directory traversal and download files suppose to be private without authentication.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free