High severity8.8NVD Advisory· Published Nov 17, 2017· Updated May 13, 2026
CVE-2017-1000238
CVE-2017-1000238
Description
InvoicePlane version 1.4.10 is vulnerable to a Arbitrary File Upload resulting in an authenticated user can upload a malicious file to the webserver. It is possible for an attacker to upload a script which is able to compromise the webserver.
Affected products
1- cpe:2.3:a:invoiceplane:invoiceplane:1.4.10:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170523-0_InvoicePlane_Upload_arbitrary_files_stored_XSS_v10.txtnvdExploitIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.