CVE-2021-36802

Name of the Vulnerable Software and Affected Versions Akaunting versions 2.1.12 and earlier

Description The issue is a denial-of-service problem triggered by setting a malformed locale variable and sending it in an otherwise normal HTTP POST request. This issue was fixed in version 2.1.13 of the product.

Recommendations For versions 2.1.12 and earlier, update to version 2.1.13 or later to resolve the issue. As a temporary workaround, consider restricting the use of the locale variable in HTTP POST requests until a patch is available.