CVE-2024-23539

published 2024-03-29

CVE-2024-23539: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Fineract.This issue affects Apache Fineract…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Fineract.This issue affects Apache Fineract: <1.8.5.

Users are recommended to upgrade to version 1.8.5 or 1.9.0, which fix the issue.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	fineract	< 1.9.0	1.9.0
apache_software_foundation	apache_fineract	<= 1.8.4	—

CWE-89