2025-12-16 00:00:00
mitre
PUBLISHED
InvoicePlane commit debb446c is vulnerable to Incorrect Access Control. The invoices/view handler fails to verify ownership before returning invoice data.