CVE-2026-29925 in Invoice Ninja
Summary
Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery (SSRF) in CheckDatabaseRequest.php.
Responsible
MITRE
Reservation
03/04/2026
Disclosure
03/30/2026
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 354242 | Invoice Ninja CheckDatabaseRequest.php server-side request forgery | 918 | Not defined | Not defined | CVE-2026-29925 |