CVE-2023-25197

CWE-89 — SQL Injection3 documents3 sources
Severity
6.3MEDIUM
EPSS
0.6%
top 29.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apache Software Foundation Apache FineractApache Fineract
Timeline
PublishedMar 28

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation apache fineract. Authorized users may be able to exploit this for limited impact on components. This issue affects apache fineract: from 1.4 through 1.8.2.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LExploitability: 2.8 | Impact: 3.4

Affected Packages2 packages

▶NVDapache/fineract1.4.0 — 1.8.2

🔴Vulnerability Details

2
CVEList
apache fineract: SQL injection vulnerability in certain procedure calls↗2023-03-28
▶
GHSA
GHSA-4f9h-qqq9-757g: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation apache fineract↗2023-03-28
▶
CVE-2023-25197 (MEDIUM CVSS 6.3) | Improper Neutralization of Special | cvebase.io