Threats tagged 'ghsa-6qjw-gmvp-q3jv'

A weakness in Akaunting version 3.1.21 affects the Invoice PDF Rendering component, specifically the config/dompdf.php file. This vulnerability allows remote attackers with limited privileges to perform server-side request forgery (SSRF) via crafted manipulation. Public exploit code is available. The vendor has not responded to disclosure attempts, and no patch information is provided.