Vulnerabilities > Akaunting > Akaunting > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-02-08 CVE-2024-22836 OS Command Injection vulnerability in Akaunting
An OS command injection vulnerability exists in Akaunting v3.1.3 and earlier.
network
low complexity
akaunting CWE-78
critical
 9.8
9.8
2021-08-04 CVE-2021-36800 Code Injection vulnerability in Akaunting
Akaunting version 2.1.12 and earlier suffers from a code injection issue in the Money.php component of the application.
network
low complexity
akaunting CWE-94
critical
 9.1
9.1