CVE-2025-58130

published 2025-12-12

CVE-2025-58130: Insufficiently Protected Credentials vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11.0. The issue is fixed in version…

critical 9.1 CVSS 3.1

AV N AC L PR N UI N S U C H I H A N

Insufficiently Protected Credentials vulnerability in Apache Fineract.

This issue affects Apache Fineract: through 1.11.0. The issue is fixed in version 1.12.1.

Users are encouraged to upgrade to version 1.13.0, the latest release.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	fineract	< 1.12.1	1.12.1
apache_software_foundation	apache_fineract	<= 1.11.0	—

CWE-522