CVE-2025-23408

概要

参考情報

• lists.apache.org/thread/bdlb6wl968yh1n48mr5npsk2spo6dncf · Mailing List
• openwall.com/lists/oss-security/2025/12/11/5 · Mailing List

fineract のその他の脆弱性

• CVE-2026-57821高 8.1A SQL Injection vulnerability exists in Apache Fineract's Office Search API (GET /api/v1/offices) in versions up to and including 1.14.0. Th…
• CVE-2026-56287高 8.1A boolean-based SQL Injection vulnerability exists in Apache Fineract's Client Search API (GET /api/v1/clients) in versions up to and includ…
• CVE-2026-35152高 8.8A SQL Injection vulnerability exists in Apache Fineract's Report Execution API (runreports endpoint) in versions up to and including 1.14.0.…
• CVE-2025-58137高 8.1Authorization Bypass Through User-Controlled Key vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11.0. The …
• CVE-2025-58130緊急 9.1Insufficiently Protected Credentials vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11.0. The issue is fix…