A vulnerability was found in InvoicePlane up to 1.6.1. It has been classified as problematic. This affects the function
download of the file invoices.php. The manipulation of the argument invoice leads to path traversal.
This vulnerability is uniquely identified as CVE-2024-12362. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
It is recommended to upgrade the affected component.
The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
