CVE-2021-29022

Monday, May 10, 2021

N/A

N/A

Summary

In InvoicePlane 1.5.11, the upload feature discloses the full path of the file upload directory.

Affected Software

Vendor	Product	Version Range	Status
n/a	n/a	`n/a`	affected

Weaknesses

n/a

ADP Enrichment

CVE Program Container

Additional References

https://notnnor.github.io/research/2021/03/17/full-path-discloure-in-invoiceplane.html

References

https://notnnor.github.io/research/2021/03/17/full-path-discloure-in-invoiceplane.html

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.