{"id":"CVE-2026-55384","revision":"8701e4fcbcf74391bda7257c60411414","records":[{"revision":"8701e4fcbcf74391bda7257c60411414","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-55384","aliases":[],"title":"InvoiceShelf trusts client-supplied document totals","description":"InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf invoice, estimate, and recurring-invoice creation paths accept client-supplied total, sub_total, tax, discount_val, and due_amount values without verifying that they match the submitted line items. An authenticated user can persist manipulated financial totals through InvoicesRequest::getInvoicePayload and the corresponding EstimatesRequest and RecurringInvoiceRequest handlers, causing stored document totals to disagree with their item prices and quantities. This issue is fixed in version 2.4.0.","state":0,"publishedAt":"2026-10-14T19:17:25.099+00:00","modifiedAt":"2026-10-15T15:05:50.446+00:00","affected":[{"ecosystem":"Vendor product","name":"InvoiceShelf","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"InvoiceShelf\",\n                    \"product\": \"InvoiceShelf\",\n                    \"versions\": [\n                        {\n                            \"version\": \"< 2.4.0\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","score":5.3,"severity":"MEDIUM"}],"references":["https://github.com/InvoiceShelf/InvoiceShelf/security/advisories/GHSA-8c69-ch98-87r6","https://github.com/InvoiceShelf/InvoiceShelf/pull/665","https://github.com/InvoiceShelf/InvoiceShelf/commit/107a951126b606880a8f4838a88cdff707ee619b","https://github.com/InvoiceShelf/InvoiceShelf/releases/tag/2.4.0"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-55384","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-55384","identifiers":["CVE-2026-55384"]},"retained":false,"historicalAffected":[]}],"coverage":[]}