InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.2.0, a Server-Side Request Forgery (SSRF) vulnerability exists in the Estimate PDF generation module. User-supplied HTML in the estimate Notes field is passed unsanitised to the Dompdf rendering library, which will fetch any remote resources referenced in the markup. The vulnerability is exploitable directly via the PDF preview and customer view endpoints regardless of whether automated email attachments are enabled. This issue has been patched in version 2.2.0.
References
| Link | Resource |
|---|---|
| https://github.com/InvoiceShelf/InvoiceShelf/releases/tag/2.2.0 | Product |
| https://github.com/InvoiceShelf/InvoiceShelf/security/advisories/GHSA-pc5v-8xwc-v9xq | Exploit Vendor Advisory |
| https://github.com/InvoiceShelf/InvoiceShelf/security/advisories/GHSA-pc5v-8xwc-v9xq | Exploit Vendor Advisory |
Configurations
History
07 Apr 2026, 15:53
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/InvoiceShelf/InvoiceShelf/releases/tag/2.2.0 - Product | |
| References | () https://github.com/InvoiceShelf/InvoiceShelf/security/advisories/GHSA-pc5v-8xwc-v9xq - Exploit, Vendor Advisory | |
| First Time |
Invoiceshelf
Invoiceshelf invoiceshelf |
|
| CPE | cpe:2.3:a:invoiceshelf:invoiceshelf:*:*:*:*:*:*:*:* |
01 Apr 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/InvoiceShelf/InvoiceShelf/security/advisories/GHSA-pc5v-8xwc-v9xq - |
31 Mar 2026, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-31 20:16
Updated : 2026-04-07 15:53
NVD link : CVE-2026-34365
Mitre link : CVE-2026-34365
CVE.ORG link : CVE-2026-34365
JSON object : View
Products Affected
invoiceshelf
- invoiceshelf
CWE
CWE-918
Server-Side Request Forgery (SSRF)