Approved changes feed: RSS · Atom

cpe:2.3:a:invoiceninja:invoice_ninja:5.12.48:*:*:*:*:*:*:*

part: a version: 5.12.48 update: *

VendorInvoiceninja (35a6f006-e570-5a3e-8534-58722d7d2394)
ProductInvoice Ninja (38753940-3207-59cf-859e-e0fcaca60b8b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/invoiceninja/invoiceninja purl2cpe 2026-06-01 10:15:05.228679

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-29925 vulnerable 2026-06-08 07:55:16.337743 Details available
Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery (SSRF) in CheckDatabaseRequest.php.
Published: 2026-03-30T00:00:00.000Z
Updated: 2026-03-30T19:16:34.202Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.