Unrated severityNVD Advisory· Published Oct 13, 2020· Updated Aug 5, 2024

CVE-2018-20243

Description

The implementation of POST with the username and password in the URL parameters exposed the credentials. More infomration is available in fineract jira issues 726 and 629.

Affected products

Apache/fineractdescription
Apache/Fineractllm-fuzzy

Patches

Vulnerability mechanics

References

lists.apache.org/thread.html/r040d46835aff3c192656b549ca82f62d87fb044ef9a9dd49408b49b4%40%3Cdev.fineract.apache.org%3Emitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000