CVE-2021-36801 Akaunting Authentication Bypass in Company Selection

Akaunting version 2.1.12 and earlier suffers from an authentication bypass issue in the user-controllable field, companies0. This issue was fixed in version 2.1.13 of the product...

CVE-2021-36801

CVE-2021-36801 affects Akaunting v2.1.12 and earlier, where an authentication bypass in the user-controllable field companies[0] allows access/operations across different companies. The vulnerability is fixed in v2.1.13. Severity is high (CVSSv3.1 base score 8.1; CVSSv2 base 5.5). Multiple source...