CVE-2021-29022: Invoiceplane

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

In InvoicePlane 1.5.11, the upload feature discloses the full path of the file upload directory.

Affected products

• Invoiceplane Invoiceplane: version 1.5.11 only

Published 2021-05-10. Last modified 2026-07-29.