Summary

In InvoicePlane 1.5.11, the upload feature discloses the full path of the file upload directory.

Affected products

Does this affect you?

Add your gear to cvedb and we'll alert you only when invoiceplane ships something exploited.

References

• NVD entry
• CVE.org record

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.