VYPR
← All advisories
High severity8.8NVD Advisory· Published Jun 21, 2021· Updated Jun 17, 2026

CVE-2020-22390

CVE-2020-22390

Description

Akaunting <= 2.0.9 is vulnerable to CSV injection in the Item name field, export function. Attackers can inject arbitrary code into the name parameter and perform code execution when the crafted file is opened.

Affected products

3
  • Akaunting/Akaunting2 versions
    cpe:2.3:a:akaunting:akaunting:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:akaunting:akaunting:*:*:*:*:*:*:*:*range: <=2.0.9
    • (no CPE)range: <=2.0.9
  • Akaunting/Akauntingdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.