CVE-2023-25196

CWE-89 — SQL Injection3 documents3 sources
Severity
4.3MEDIUM
EPSS
1.0%
top 23.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apache Software Foundation Apache FineractApache Fineract
Timeline
PublishedMar 28

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation Apache Fineract. Authorized users may be able to change or add data in certain components. This issue affects Apache Fineract: from 1.4 through 1.8.2.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶NVDapache/fineract1.4.0 — 1.8.2

🔴Vulnerability Details

2
CVEList
Apache Fineract: SQL injection vulnerability↗2023-03-28
▶
GHSA
GHSA-wvv8-m353-pjr5: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation Apache Fineract↗2023-03-28
▶
CVE-2023-25196 (MEDIUM CVSS 4.3) | Improper Neutralization of Special | cvebase.io