CVE-2024-23538

Description

References

• openwall.com/lists/oss-security/2024/03/29/2 · Mailing List
• cwiki.apache.org/confluence/display/FINERACT/Apache+Fineract+Security+Report · Vendor Advisory
• lists.apache.org/thread/by32w2dylzgbqm5940x3wj7519wolqxs · Mailing List

More vulnerabilities in fineract

• CVE-2026-57821HIGH 8.1A SQL Injection vulnerability exists in Apache Fineract's Office Search API (GET /api/v1/offices) in versions up to and including 1.14.0. Th…
• CVE-2026-56287HIGH 8.1A boolean-based SQL Injection vulnerability exists in Apache Fineract's Client Search API (GET /api/v1/clients) in versions up to and includ…
• CVE-2026-35152HIGH 8.8A SQL Injection vulnerability exists in Apache Fineract's Report Execution API (runreports endpoint) in versions up to and including 1.14.0.…
• CVE-2025-58137HIGH 8.1Authorization Bypass Through User-Controlled Key vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11.0. The …
• CVE-2025-58130CRITICAL 9.1Insufficiently Protected Credentials vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11.0. The issue is fix…