CVE-2021-29022: invoiceplane invoiceplane – CVSS 5.3 · Watchpost

← All vulnerabilities

CVE-2021-29022

보통 5.3CVE-2021-29022 · Published 10/05/2021 · updated 29/07/2026

요약

CVE-2021-29022은(는) invoiceplane (invoiceplane)에 영향을 주는 보통 (CVSS 5.3) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.1%, 전체 취약점의 65.2%보다 높음.
아직 패치 버전 정보가 없습니다. 참고 자료의 공급업체 권고를 확인하세요.

Package	Affected versions	Patched versions
invoiceplane invoiceplane	`= 1.5.11`	No fix yet

Description

In InvoicePlane 1.5.11, the upload feature discloses the full path of the file upload directory.

References

notnnor.github.io/research/2021/03/17/full-path-discloure-in-invoiceplane.html · Exploit
seran.dev/research/2021/03/17/full-path-discloure-in-invoiceplane.html

invoiceplane의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free