Question: What is CVE-2025-0474?
Answer: CVE-2025-0474 is a vulnerability classified as high with a CVSS score of 7.7. It falls under CWE-918 and affects the system as follows: Invoice Ninja is vulnerable to authenticated Server-Side Request Forgery (SSRF) allowing for arbitrary file read and network resource requests as the application user.
This issue affects Invoice Ninja: from 5.8.56 through 5.11.23.