Lucene search

K
osvGoogleOSV:CVE-2018-1290
HistoryApr 20, 2018 - 6:29 p.m.

CVE-2018-1290

2018-04-2018:29:00
Google
osv.dev
3

9.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.5%

In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, Using a single quotation escape with two continuous SQL parameters can cause a SQL injection. This could be done in Methods like retrieveAuditEntries of AuditsApiResource Class and retrieveCommands of MakercheckersApiResource Class.

9.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.5%

Related for OSV:CVE-2018-1290