PT-2026-29341 · Unknown+1 · Invoiceshelf+1

Lagongit · Published 2026-03-31 · Updated 2026-04-01 · CVE-2026-34365

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions InvoiceShelf versions prior to 2.2.0

Description InvoiceShelf is a web and mobile application used for expense tracking, payments, invoice creation, and estimates. A Server-Side Request Forgery (SSRF) exists in the Estimate PDF generation module in versions prior to 2.2.0. User-supplied HTML within the estimate Notes field is passed without sanitization to the Dompdf rendering library, allowing it to fetch remote resources referenced in the HTML markup. The vulnerability is exploitable through the PDF preview and customer view endpoints.

Recommendations Update to version 2.2.0 or later.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-34365

GHSA-PC5V-8XWC-V9XQ

Affected Products

Dompdf

Invoiceshelf

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34365.json · Exploit
• 🔥 https://github.com/InvoiceShelf/InvoiceShelf/security/advisories/GHSA-pc5v-8xwc-v9xq · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-34365 · Security Note
• https://osv.dev/vulnerability/CVE-2026-34365 · Vendor Advisory
• https://github.com/InvoiceShelf/InvoiceShelf/releases/tag/2.2.0 · Note
• https://twitter.com/CVEnew/status/2039372144702841338 · Twitter Post
• https://twitter.com/infoflowcloud/status/2039373813767417938 · Twitter Post