VULNERABILITY INTELLIGENCE

CVE-2020-22390

CVSS score8.8 HIGH

EPSS probability1.59%

CISA KEVNot currently listed

Published2021-06-21

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Akaunting <= 2.0.9 is vulnerable to CSV injection in the Item name field, export function. Attackers can inject arbitrary code into the name parameter and perform code execution when the crafted file is opened.

Weakness classification

nvd@nist.gov: CWE-1236

Primary references

cve@mitre.org — Exploit, Third Party Advisory, URL Repurposed
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, URL Repurposed