VYPR
← All advisories
High severity8.8NVD Advisory· Published Nov 29, 2022· Updated Jun 17, 2026

CVE-2022-44635

CVE-2022-44635

Description

Apache Fineract allowed an authenticated user to perform remote code execution due to a path traversal vulnerability in a file upload component of Apache Fineract, allowing an attacker to run remote code. This issue affects Apache Fineract version 1.8.0 and prior versions. We recommend users to upgrade to 1.8.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Apache/Fineract3 versions
    cpe:2.3:a:apache:fineract:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:apache:fineract:*:*:*:*:*:*:*:*range: <1.8.1
    • (no CPE)range: <=1.8.0
    • (no CPE)range: Apache Fineract 1.8

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.