CVE-2025-58130

published 2025-12-12

CVE-2025-58130: Insufficiently Protected Credentials vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11.0. The issue is fixed in version…

Priority P3 57 critical 9.1 CVSS 3.1

AV N AC L PR N UI N S U C H I H A N

Insufficiently Protected Credentials vulnerability in Apache Fineract.

This issue affects Apache Fineract: through 1.11.0. The issue is fixed in version 1.12.1.

Users are encouraged to upgrade to version 1.13.0, the latest release.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	fineract	< 1.12.1	1.12.1
apache_software_foundation	apache_fineract	<= 1.11.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-522