Unscored CVE-2023-25197 EUVD-2023-29160GHSA-4f9h-qqq9-757g

apache fineract: SQL injection vulnerability in certain procedure calls

Published Mar 28, 2023 · Updated Oct 23, 2024 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Fineract

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation apache fineract.
Authorized users may be able to exploit this for limited impact on components.

This issue affects apache fineract: from 1.4 through 1.8.2.

Affected products

Vendor	Product	Affected	Fixed
Apache Software Foundation	apache fineract	1.4 – ≤ 1.8.2	—

References

https://lists.apache.org/thread/v0q9x86sx6f6l2nzr1z0nwm3y9qlng04 vendor-advisory