CVE-2025-10009

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-10009
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-10009.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-10009
Published
2025-09-22T09:20:03.168Z
Modified
2026-08-12T03:51:22.038410940Z
Severity
  • 8.6 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L CVSS Calculator
Summary
Authenticated admin RCE in Invoice Ninja
Details

Incorrect handling of uploaded files in the admin "Restore" function in Invoice Ninja <= 5.11.72 allows attackers with admin credentials to execute arbitrary code on the server via uploaded .php files.

Database specific 
{
    "cwe_ids": [
        "CWE-434"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/10xxx/CVE-2025-10009.json",
    "cna_assigner": "NCSC-FI"
}
References

Affected packages

Git / github.com/invoiceninja/invoiceninja

Affected ranges

Type
GIT
Repo
https://github.com/invoiceninja/invoiceninja
Events
Introduced
b64aceaf64d3c25718e76788e109709518ecd9c2
Fixed
02151b570b226b4584a8e61b06b10be9366da3de
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "5.11.41"
        },
        {
            "last_affected": "5.11.72"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

v5.*
v5.11.41
v5.11.42
v5.11.43
v5.11.44
v5.11.44a
v5.11.45
v5.11.46
v5.11.48
v5.11.49
v5.11.50
v5.11.51
v5.11.52
v5.11.53
v5.11.54
v5.11.55
v5.11.56
v5.11.57
v5.11.58
v5.11.59
v5.11.60
v5.11.61
v5.11.62
v5.11.63
v5.11.64
v5.11.65
v5.11.66
v5.11.67
v5.11.68
v5.11.69
v5.11.70
v5.11.71
v5.11.72

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-10009.json"