CVE-2023-25197 — apache fineract: SQL injection vulnerability in certain procedure calls

CVE-2023-25197

apache fineract: SQL injection vulnerability in certain procedure calls PUBLISHED

Description (CNA)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation apache fineract. Authorized users may be able to exploit this for limited impact on components. This issue affects apache fineract: from 1.4 through 1.8.2.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / apache fineract	affected 1.4 through 1.8.2

CWE

CWE-89

References

https://lists.apache.org/thread/v0q9x86sx6f6l2nzr1z0nwm3y9qlng04

ADP enrichment

CVE

No English description supplied.

https://lists.apache.org/thread/v0q9x86sx6f6l2nzr1z0nwm3y9qlng04

CISA-ADP

No English description supplied.

No references supplied.