Approved changes feed: RSS · Atom

cpe:2.3:a:akaunting:akaunting:3.1.19:*:*:*:*:*:*:*

part: a version: 3.1.19 update: *

VendorAkaunting (760f95d9-46da-56b2-8a01-9e27558e8e8e)
ProductAkaunting (4671b377-11da-5f83-ba0e-7aa70e8948ae)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/akaunting/akaunting purl2cpe 2026-06-01 10:15:56.094135
pkg:github/akaunting/akaunting purl2cpe 2026-06-01 10:15:56.094136
pkg:sourceforge/akaunting purl2cpe 2026-06-01 10:15:56.094138

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-58293 vulnerable 2026-06-08 06:56:14.376762 Akaunting 3.1.8 Server-Side Template Injection via Multiple Form Fields
Akaunting 3.1.8 contains a server-side template injection vulnerability that allows authenticated administrators to execute template expressions in multiple form input fields. Attackers can inject template payloads in items, taxes, transactions, and vendor name fields to perform arithmetic operations and string manipulations.
Published: 2025-12-11T21:35:50.373Z
Updated: 2026-04-07T14:08:41.769Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.