InvoiceShelf
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 11 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 31, 2026 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →InvoiceShelf: Cross-company read/modify/delete of notes via missing company scope in NotePolicy (BOLA/IDOR)
InvoiceShelf: SSRF via unvalidated Gotenberg PDF renderer host in PDF configuration
InvoiceShelf: IDOR in InvoiceShelf estimate-to-invoice conversion allows any company user to read and tamper with other companies' estimates
InvoiceShelf: Public EmailLog token type confusion allows cross-company invoice disclosure
InvoiceShelf bulk deletion lacks company scoping
InvoiceShelf ORDER BY SQL injection through orderByField
InvoiceShelf trusts client-supplied document totals
InvoiceShelf has cross-company user read/update IDOR that enables cross-tenant account takeover
InvoiceShelf: SSRF in Invoice PDF Rendering via Unsanitised HTML in Notes Field
InvoiceShelf: SSRF in Payment Receipt PDF Rendering via Unsanitised HTML in Notes Field
Monitor InvoiceShelf in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.