high7.7
CVE-2026-29925
Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery (SSRF) in CheckDatabaseRequest.php.
Impact
Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery (SSRF) in CheckDatabaseRequest.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Invoiceninja | Invoice Ninja | Versions 5.12.46, 5.12.48 |