VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Mar 28, 2023· Updated Jun 17, 2026

CVE-2023-25196

CVE-2023-25196

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation Apache Fineract. Authorized users may be able to change or add data in certain components.

This issue affects Apache Fineract: from 1.4 through 1.8.2.

Affected products

3
  • Apache/Fineract3 versions
    cpe:2.3:a:apache:fineract:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:apache:fineract:*:*:*:*:*:*:*:*range: >=1.4.0,<=1.8.2
    • (no CPE)range: 1.4 - 1.8.2
    • (no CPE)range: 1.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.