CVE-2021-29022

CVE-2021-29022

In InvoicePlane 1.5.11, the upload feature discloses the full path of the file upload directory.

Source: CVE-2021-29022