CVE-2018-11801: SQL injection vulnerability in Apache Fineract before 1.3.0 allows attacker

SQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary SQL commands via a query on a m_center data related table.

Status

Published

2019-06-11

Updated

2024-08-05

Assigning organization

apache

Description

SQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary SQL commands via a query on a m_center data related table.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Apache Fineract

Apache Fineract versions before 1.3.0 are affectedaffected

References

https://lists.apache.org/thread.html/32aa471180f8978b5f0ed64fcd862769f73c40bbe6cb948abdc899bf%40%3Cdev.fineract.apache.org%3E ↗
http://www.openwall.com/lists/oss-security/2019/05/09/1 ↗
http://www.securityfocus.com/bid/108291 ↗