Review reviewHigh

CVE-2026-34365

InvoiceShelf InvoiceShelf, invoiceshelf

InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.2.0, a Server-Side Request Forgery (SSRF) vulnerability exists in the Estimate PDF generation module. User-supplied HTML in the estimate Notes field is passed unsanitised to the Dompdf rendering library, which will fetch any remote resources referenced in the markup. The vulnerability is exploitable directly via the PDF preview and customer view endpoints regardless of whether automated email attachments are enabled. This issue has been patch...

CVSS: 8.1
EPSS: 0.24%
CISA KEV: Not listed
Published: 2026.04.01

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.24%

Technical severityCVSS 8.1

Vulnerability overview

Affected product and versions

Product: InvoiceShelf InvoiceShelf, invoiceshelf
Affected versions: >= < 2.2.0, < 2.2.0
Fixed versions: 2.2.0

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that InvoiceShelf InvoiceShelf, invoiceshelf and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE: CWE-918