A vulnerability classified as critical was found in InvoicePlane up to 1.6.3. Affected by this issue is some unknown functionality of the component Configuration Handler. Executing a manipulation can lead to path traversal.
This vulnerability is registered as CVE-2025-67083. It is possible to launch the attack remotely. No exploit is available.
