CVE-2022-51019

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-51019
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-51019.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-51019
Published
2026-09-29T16:04:16Z
Modified
2026-10-01T03:45:05Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
Akaunting before 2.1.31 OS Command Injection via app alias
Details

Akaunting before 2.1.31 contains an OS command injection vulnerability in the module installation and update flow where the alias parameter is passed unvalidated to shell command execution. Authenticated users with admin panel access can inject shell metacharacters into the alias parameter to execute arbitrary commands on the server.

Database specific 
{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-78"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/51xxx/CVE-2022-51019.json"
}
References

Affected packages

Git / github.com/akaunting/akaunting

Affected ranges

Type
GIT
Repo
https://github.com/akaunting/akaunting
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
0a1ccab5a9e10719f3b01dac98dadc815e1f90e5
Fixed
a1792327347a56ea575240b58673b2ece44230da
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "fixed":  "2.1.31"
        }
    ],
    "source":  [
        "DESCRIPTION",
        "REFERENCES"
    ]
}

Affected versions

1.*
1.0.0
1.0.1
1.0.10
1.0.12
1.0.2
1.0.3
1.0.4
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.1.1
1.1.10
1.1.11
1.1.12
1.1.13
1.1.14
1.1.15
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.1
1.2.11
1.2.12
1.2.13
1.2.14
1.2.16
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.3.0
1.3.1
1.3.10
1.3.11
1.3.12
1.3.13
1.3.14
1.3.15
1.3.16
1.3.17
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
2.*
2.0.0
2.0.2
2.0.24
2.0.25
2.0.26
2.0.3
2.0.4
2.0.5
2.0.7
2.0.8
2.0.9
2.1.1
2.1.10
2.1.11
2.1.12
2.1.13
2.1.14
2.1.15
2.1.16
2.1.17
2.1.18
2.1.19
2.1.2
2.1.20
2.1.21
2.1.22
2.1.23
2.1.24
2.1.26
2.1.27
2.1.28
2.1.29
2.1.3
2.1.30
2.1.6
2.1.7
2.1.8
2.1.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-51019.json"