Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2023-25195

Apache Fineract: SSRF template type vulnerability in certain authenticated users

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apache

Description

Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache Fineract. Authorized users with limited permissions can gain access to server and may be able to use server for any outbound traffic.  This issue affects Apache Fineract: from 1.4 through 1.8.3.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Fineract

Default version status: affected

  • 1.4 to ≤ 1.8.3affected

References