Unscored CVE-2018-11801 EUVD-2018-3795GHSA-p9jr-5339-4hvx

SQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary SQL commands via a query on a m_center da…

Published Jun 11, 2019 · Updated Aug 5, 2024 · Assigned by apache

Description

SQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary SQL commands via a query on a m_center data related table.

Affected products

Vendor	Product	Affected	Fixed
Apache	Apache Fineract	Apache Fineract versions before 1.3.0 are affected	—

References

[fineract-dev] 20190509 [CVE-2018-11800] and [CVE-2018-11801] Apache Fineract SQL Injection Vulnerabilities fixed in v1.3.0 mailing-list
[oss-security] 20190509 [CVE-2018-11800] and [CVE-2018-11801] Apache Fineract SQL Injection Vulnerabilities fixed in v1.3.0 mailing-list
108291 vdb-entry