USN-5097-1: LedgerSMB vulnerabilities
30 September 2021
ledgersmb could be made to crash if it received specially crafted input.
- ledgersmb - financial accounting and ERP program
It was discovered that LedgerSMB incorrectly handled certain inputs. An
attacker could use this to leak sensitive information, cause a DoS, or
execute arbitrary code. (CVE-2021-3693, CVE-2021-3694, CVE-2021-3731)