medium4.3
CVE-2025-64012
InvoicePlane commit debb446c is vulnerable to Incorrect Access Control.
Impact
InvoicePlane commit debb446c is vulnerable to Incorrect Access Control. The invoices/view handler fails to verify ownership before returning invoice data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Invoiceplane | Invoiceplane | Version 1.6.1 |