CVE-2025-10009 | Invoice Ninja up to 5.11.72 unrestricted upload

September 22, 2025 Yanac

A vulnerability labeled as critical has been found in Invoice Ninja up to 5.11.72. Affected by this issue is some unknown functionality. Executing manipulation can lead to unrestricted upload.

This vulnerability is handled as CVE-2025-10009. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More