CVE-2021-36802

Publication date

2021-08-04 22:20:41

Family

rapid7

State

PUBLISHED

Description

Akaunting version 2.1.12 and earlier suffers from a denial-of-service issue that is triggered by setting a malformed locale variable and sending it in an otherwise normal HTTP POST request. This issue was fixed in version 2.1.13 of the product.