CVE-2024-22836

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-22836

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-22836.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-22836

Published

2024-02-08T00:00:00Z

Modified

2026-10-21T02:30:36Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

An OS command injection vulnerability exists in Akaunting v3.1.3 and earlier. An attacker can manipulate the company locale when installing an app to execute system commands on the hosting server.

Database specific

{
    "cna_assigner":  "mitre",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/22xxx/CVE-2024-22836.json"
}

References

Affected packages

Git / github.com/akaunting/akaunting

Affected ranges

Type

GIT

Repo

https://github.com/akaunting/akaunting

Events

Introduced

Fixed

cc7e02cd4aae1409e62fa27d995921d2abcc5730

Database specific

Show details

{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:akaunting:akaunting:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "3.1.4"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "original_tag":  "3.1.4",
            "range":  [
                {
                    "fixed":  "cc7e02cd4aae1409e62fa27d995921d2abcc5730"
                }
            ],
            "source":  "REFERENCES_TAG"
        }
    ]
}

Affected versions

1.*

1.0.0

1.0.1

1.0.10

1.0.12

1.0.2

1.0.3

1.0.4

1.0.6

1.0.7

1.0.8

1.0.9

1.1.0

1.1.1

1.1.10

1.1.11

1.1.12

1.1.13

1.1.14

1.1.15

1.1.2

1.1.3

1.1.4

1.1.5

1.1.6

1.1.7

1.1.8

1.1.9

1.2.0

1.2.1

1.2.11

1.2.12

1.2.13

1.2.14

1.2.16

1.2.3

1.2.4

1.2.5

1.2.6

1.2.7

1.2.8

1.2.9

1.3.0

1.3.1

1.3.10

1.3.11

1.3.12

1.3.13

1.3.14

1.3.15

1.3.16

1.3.17

1.3.2

1.3.3

1.3.4

1.3.5

1.3.6

1.3.7

1.3.8

2.*

2.0.0

2.0.2

2.0.24

2.0.25

2.0.26

2.0.3

2.0.4

2.0.5

2.0.7

2.0.8

2.0.9

2.1.1

2.1.10

2.1.11

2.1.12

2.1.13

2.1.14

2.1.15

2.1.16

2.1.17

2.1.18

2.1.19

2.1.2

2.1.20

2.1.21

2.1.22

2.1.23

2.1.24

2.1.26

2.1.27

2.1.28

2.1.29

2.1.3

2.1.30

2.1.31

2.1.32

2.1.33

2.1.34

2.1.35

2.1.6

2.1.7

2.1.8

2.1.9

3.*

3.0.0

3.0.1

3.0.10

3.0.12

3.0.16

3.0.17

3.0.2

3.0.3

3.0.4

3.0.5

3.0.6

3.0.7

3.0.8

3.0.9

3.1.0

3.1.1

3.1.2

3.1.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-22836.json"