CVE-2025-23408

Description

References

• lists.apache.org/thread/bdlb6wl968yh1n48mr5npsk2spo6dncf · Mailing List
• openwall.com/lists/oss-security/2025/12/11/5 · Mailing List

fineract의 다른 취약점

• CVE-2026-57821높음 8.1A SQL Injection vulnerability exists in Apache Fineract's Office Search API (GET /api/v1/offices) in versions up to and including 1.14.0. Th…
• CVE-2026-56287높음 8.1A boolean-based SQL Injection vulnerability exists in Apache Fineract's Client Search API (GET /api/v1/clients) in versions up to and includ…
• CVE-2026-35152높음 8.8A SQL Injection vulnerability exists in Apache Fineract's Report Execution API (runreports endpoint) in versions up to and including 1.14.0.…
• CVE-2025-58137높음 8.1Authorization Bypass Through User-Controlled Key vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11.0. The …
• CVE-2025-58130심각 9.1Insufficiently Protected Credentials vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11.0. The issue is fix…