CVE-2020-22390

PoC —

CVSS 3.1

8.8 high

EPSS

2%p74

Published

Jun 21, 2021 (Jun 21, 2021)

Modified

Jun 17, 2026

Description

Akaunting <= 2.0.9 is vulnerable to CSV injection in the Item name field, export function. Attackers can inject arbitrary code into the name parameter and perform code execution when the crafted file is opened.

Vendors: akaunting
Products: akaunting
Weakness: CWE-1236
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.