VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Mar 28, 2023· Updated Jun 17, 2026

CVE-2023-25197

CVE-2023-25197

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation apache fineract. Authorized users may be able to exploit this for limited impact on components.

This issue affects apache fineract: from 1.4 through 1.8.2.

Affected products

3
  • Apache/Fineract3 versions
    cpe:2.3:a:apache:fineract:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:apache:fineract:*:*:*:*:*:*:*:*range: >=1.4.0,<=1.8.2
    • (no CPE)range: 1.4 - 1.8.2
    • (no CPE)range: 1.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.