High · 8.1 CVE-2023-25195 EUVD-2023-29158GHSA-c856-8gm2-wg44

Apache Fineract: SSRF template type vulnerability in certain authenticated users

Published Mar 28, 2023 · Updated Oct 23, 2024 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Fineract

Description

Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache Fineract.
Authorized users with limited permissions can gain access to server and may be able to use server for any outbound traffic.

This issue affects Apache Fineract: from 1.4 through 1.8.3.

Affected products

Vendor	Product	Affected	Fixed
Apache Software Foundation	Apache Fineract	1.4 – ≤ 1.8.3	—

References

https://lists.apache.org/thread/m58fdjmtkfp9h4c0r4l48rv995w3qhb6 vendor-advisory