What is CVE-2020-22390?

CVE-2020-22390 is a high-severity vulnerability in Akaunting, classified under Improper Neutralization of Formula Elements in a CSV File. CVSS score: 8.8/10. Published 2021-06-21.

How severe is CVE-2020-22390?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Akaunting

CVE-2020-22390

Akaunting <= 2.0.9 is vulnerable to CSV injection in the Item name field, export function. Attackers can inject arbitrary code into the name parameter and perform code execution when the crafted file is opened.

EPSS: 0.016 (73.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Akaunting
N/a — versions n/a

Weakness classification (CWE)

CWE-1236 — Improper Neutralization of Formula Elements in a CSV File

References

cve@mitre.org (URL Repurposed, Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-22390?: CVE-2020-22390 is a high-severity vulnerability in Akaunting, classified under Improper Neutralization of Formula Elements in a CSV File. CVSS score: 8.8/10. Published 2021-06-21.
How severe is CVE-2020-22390?: High severity. CVSS v3 base score is 8.8 out of 10.