CVE-2026-55385Medium· 6.8▾ TwilightPoC availableInvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf's PDFConfigurationRequest.php validates the owner-controlled gotenbe…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 37.4 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 16.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.5%
Exploit / PoC code exists
0.5% → 0.6%
InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf's PDFConfigurationRequest.php validates the owner-controlled gotenberg_host setting only as a syntactically valid URL. GotenbergPDFDriver::loadView later sends a multipart HTTP request containing rendered invoice, estimate, or payment HTML as document.html to that host without rejecting private, loopback, link-local, or reserved addresses. An owner can use PDF generation to reach internal services or cloud metadata endpoints, and a configured external host receives customer names, addresses, line items, totals, and company identifiers from subsequent PDF renders. This issue is fixed in version 2.4.0.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-55387High· 7.2InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates
CVE-2026-55386High· 7.1InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates
CVE-2026-55381High· 7.1InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates
CVE-2026-55383High· 8.2InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates
CVE-2026-55384Medium· 5.3InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates
CVE-2026-55382High· 7.6InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates