VULNERABILITY INTELLIGENCE

CVE-2025-67083

CVSS score5.3 MEDIUM
EPSS probability0.72%
CISA KEVNot currently listed
Published2026-01-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

Directory traversal vulnerability in InvoicePlane through 1.6.3 allows unauthenticated attackers to read files from the server. The ability to read files and the file type depends on the web server and its configuration.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-22

Primary references