Description
Akaunting存在命令注入漏洞，此漏洞是由于companies接口对用户的请求验证不当导致的。
Akaunting CVE-2024-22836 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2024-22836
https://nvd.nist.gov/vuln/detail/CVE-2024-22836
https://www.sentinelone.com/vulnerability-database/cve-2024-22836/
https://www.exploit-db.com/exploits/51870
https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2024-22836
https://www.cyberhub.blog/cves/CVE-2024-22836
https://cve.yack.one/products/akaunting:akaunting
https://securityvulnerability.io/vulnerability/CVE-2024-22836