CVE-2025-67082 | InvoicePlane up to 1.6.3 maxQuantity/minQuantity sql injection

A vulnerability classified as critical has been found in InvoicePlane up to 1.6.3. Affected by this vulnerability is an unknown functionality. Performing a manipulation of the argument maxQuantity/minQuantity results in sql injection.

This vulnerability is cataloged as CVE-2025-67082. It is possible to initiate the attack remotely. There is no exploit available.