CVE-2020-22390 | BDVDB-2026-155686 Detail

Description#

Akaunting <= 2.0.9 is vulnerable to CSV injection in the Item name field, export function. Attackers can inject arbitrary code into the name parameter and perform code execution when the crafted file is opened.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://cqinfo.la/csv-injection-in-akaunting/

Exploit#

No public exploit known

History#

Version 12021-06-21Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.