Apache Fineract SQL Injection Vulnerability (CNVD-2023-23557)

Apache Fineract is an open source digital financial services platform from the Apache Foundation. The platform can provide users with data management, loan and savings portfolio management and real-time financial data and other features. Apache Fineract versions 1.4 to 1.8.3 have a SQL injection vulnerability, which stems from the use of special elements of the system does not neutralize the vulnerability, the attacker uses the vulnerability to cause SQL injection attacks.