CVE-2026-100371 | InvoicePlane 1.7.2 Password Recovery Users::form user_email improper authorization (8616fa4)

September 28, 2026 Yanac

A vulnerability was found in InvoicePlane 1.7.2. It has been rated as problematic. This issue affects the function Users::form of the component Password Recovery. The manipulation of the argument user_email leads to improper authorization.

This vulnerability is listed as CVE-2026-100371. The attack may be initiated remotely. There is no available exploit.

Applying a patch is the recommended action to fix this issue.VulDB Recent EntriesRead More