Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2022-44635

Apache Fineract allowed an authenticated user to perform remote code execution due to path traversal

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apache

Description

Apache Fineract allowed an authenticated user to perform remote code execution due to a path traversal vulnerability in a file upload component of Apache Fineract, allowing an attacker to run remote code. This issue affects Apache Fineract version 1.8.0 and prior versions. We recommend users to upgrade to 1.8.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Fineract

  • Apache Fineract 1.8 to ≤ 1.8.0affected
  • Apache Fineract 1.7 to ≤ 1.7.0affected

References