| Package | Affected versions | Patched versions |
|---|---|---|
| fineract | = 0.4.0= 0.5.0= 0.6.0= 1.0.0 |
In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, Using a single quotation escape with two continuous SQL parameters can cause a SQL injection. This could be done in Methods like retrieveAuditEntries of AuditsApiResource Class and retrieveCommands of MakercheckersApiResource Class.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free