PT-2026-29343 · Unknown+1 · Invoiceshelf+1

Lagongit · Published 2026-03-31 · Updated 2026-04-01 · CVE-2026-34367

Positive Technologies (AI Summary)

CVSS v3.1

8.7

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions InvoiceShelf versions prior to 2.2.0

Description InvoiceShelf is a web and mobile application for tracking expenses, payments, and creating invoices and estimates. A Server-Side Request Forgery (SSRF) vulnerability exists in the Invoice PDF generation module in versions prior to 2.2.0. User-supplied HTML within the invoice Notes field is passed without sanitization to the Dompdf rendering library, allowing it to fetch remote resources referenced in the HTML markup. This can be triggered through the PDF preview and email delivery endpoints.

Recommendations Update to version 2.2.0 or later.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-34367

GHSA-Q9WX-GGWQ-MCGH

Affected Products

Dompdf

Invoiceshelf

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34367.json · Exploit
• https://github.com/InvoiceShelf/InvoiceShelf/security/advisories/GHSA-q9wx-ggwq-mcgh · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-34367 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34367 · Security Note
• https://github.com/InvoiceShelf/InvoiceShelf/releases/tag/2.2.0 · Note
• https://twitter.com/CVEnew/status/2039372140382703692 · Twitter Post