CVE-2020-22390

Akaunting <= 2.0.9 is vulnerable to CSV injection in the Item name field, export function

published June 21, 2021

CVSS
—
EPSS
2%
Percentile
75.4
In the wild
Unconfirmed
What it is

Akaunting <= 2.0.9 is vulnerable to CSV injection in the Item name field, export function. Attackers can inject arbitrary code into the name parameter and perform code execution when the crafted file is opened.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01589 · 75.4th percentile
Published
2021-06-21T14:02Z
EPSS history
Timeline
  • 21 JUN 14:02Z
    Akaunting <= 2.0.9 is vulnerable to CSV injection in the Item name field, export function
    cvelistv5