CVE-2020-22390

First published: Mon Jun 21 2021(Updated: )

Akaunting <= 2.0.9 is vulnerable to CSV injection in the Item name field, export function. Attackers can inject arbitrary code into the name parameter and perform code execution when the crafted file is opened.

Credit: cve@mitre.org cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/type
• agent/first-publish-date
• collector/nvd-api
• source/NVD
• agent/software-canonical-lookup
• agent/last-modified-date
• agent/weakness
• agent/references
• agent/severity
• agent/author
• agent/softwarecombine
• agent/description
• agent/tags
• agent/event
• collector/mitre-cve
• source/MITRE
• vendor/akaunting
• canonical/akaunting akaunting
• version/akaunting akaunting/2.0.9