CVE-2021-29024
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk69th percentile - higher than 69% of all known CVEs
Summary
In InvoicePlane 1.5.11, a misconfigured web server allows an unauthenticated attacker to list directories and download files that should be private via directory traversal.
Risk Assessment
An attacker can access sensitive files, such as invoices or customer data, without authentication.
Recommendation
Configure the web server to disable directory listing and restrict file access.
Other vulnerabilities in InvoicePlane
See all- CVE-2017-1000238High
InvoicePlane version 1.4.10 is vulnerable to an Arbitrary File Upload, allowing an authenticated user to upload a malicious file to the webserver. An attacker can upload a script that can compromise the webserver.
- CVE-2025-67084Critical
InvoicePlane through 1.6.3 contains a file upload vulnerability allowing authenticated attackers to upload arbitrary PHP files into attachments, which can later be executed remotely, leading to Remote Code Execution (RCE).
- CVE-2021-29023Medium
InvoicePlane 1.5.11 lacks rate-limiting for password reset and uses a weak, predictable token generation mechanism.
- CVE-2021-29022Medium
InvoicePlane 1.5.11 discloses the full path of the file upload directory when using the upload feature.
Original NVD description (English source)
In InvoicePlane 1.5.11 a misconfigured web server allows unauthenticated directory listing and file download. Allowing an attacker to directory traversal and download files suppose to be private without authentication.