CVE-2026-55385 | InvoiceShelf up to 2.3.x PDF Generation PDFConfigurationRequest.php loadView gotenberg_host server-side request forgery

October 14, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in InvoiceShelf up to 2.3.x. This affects the function GotenbergPDFDriver::loadView of the file PDFConfigurationRequest.php of the component PDF Generation. Performing a manipulation of the argument gotenberg_host results in server-side request forgery.

This vulnerability is identified as CVE-2026-55385. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More