Unrated severityNVD Advisory· Published Feb 8, 2024· Updated Jun 20, 2025

CVE-2024-22836

Description

An OS command injection vulnerability exists in Akaunting v3.1.3 and earlier. An attacker can manipulate the company locale when installing an app to execute system commands on the hosting server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Akaunting/Akauntingcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=3.1.3

Patches

Vulnerability mechanics

References

akaunting.commitre
github.com/akaunting/akaunting/releases/tag/3.1.4mitre
github.com/u32i/cve/tree/main/CVE-2024-22836mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.024
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000