Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2021-36802

Akaunting DoS via User-Controlled 'locale' Variable

Description

Akaunting version 2.1.12 and earlier suffers from a denial-of-service issue that is triggered by setting a malformed 'locale' variable and sending it in an otherwise normal HTTP POST request. This issue was fixed in version 2.1.13 of the product.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Akaunting Akaunting

  • 2.1.12 to ≤ 2.1.12affected

References