Lucene search

GoogleOSV:CVE-2023-25196

HistoryMar 28, 2023 - 12:15 p.m.

CVE-2023-25196

2023-03-2812:15:07

Google

osv.dev

cve-2023-25196

sql injection

apache fineract

apache software foundation

authorized users

data change

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

7.8

Confidence

Low

EPSS

0.001

Percentile

44.0%

JSON

Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Apache Software Foundation Apache Fineract.
Authorized users may be able to change or add data in certain components.

This issue affects Apache Fineract: from 1.4 through 1.8.2.

References

lists.apache.org/thread/m9x3vpn3bry4fympkzxnnz4qx0oc0w8m

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

7.8

Confidence

Low

EPSS

0.001

Percentile

44.0%

JSON

Related for OSV:CVE-2023-25196