VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 29, 2022· Updated Apr 25, 2025

Apache Fineract allowed an authenticated user to perform remote code execution due to path traversal

CVE-2022-44635

Description

Apache Fineract allowed an authenticated user to perform remote code execution due to a path traversal vulnerability in a file upload component of Apache Fineract, allowing an attacker to run remote code. This issue affects Apache Fineract version 1.8.0 and prior versions. We recommend users to upgrade to 1.8.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Apache/Fineractllm-fuzzy2 versions
    <=1.8.0+ 1 more
    • (no CPE)range: <=1.8.0
    • (no CPE)range: Apache Fineract 1.8

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.