CVE-2025-58137

published 2025-12-12

CVE-2025-58137: Authorization Bypass Through User-Controlled Key vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11.0. The issue is fixed in…

Priority P3 50 high 8.1 CVSS 3.1

AV N AC L PR L UI N S U C H I H A N

Authorization Bypass Through User-Controlled Key vulnerability in Apache Fineract.

This issue affects Apache Fineract: through 1.11.0. The issue is fixed in version 1.12.1.

Users are encouraged to upgrade to version 1.13.0, the latest release.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	fineract	< 1.12.1	1.12.1
apache_software_foundation	apache_fineract	<= 1.11.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-639