Lucene search

GoogleOSV:CVE-2023-25197

HistoryMar 28, 2023 - 12:15 p.m.

CVE-2023-25197

2023-03-2812:15:07

Google

osv.dev

cve-2023-25197

apache fineract

sql injection

authorized users

impact

software vulnerability

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

7.8

Confidence

Low

EPSS

0.001

Percentile

39.9%

JSON

Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Apache Software Foundation apache fineract.
Authorized users may be able to exploit this for limited impact on components.

This issue affects apache fineract: from 1.4 through 1.8.2.

References

lists.apache.org/thread/v0q9x86sx6f6l2nzr1z0nwm3y9qlng04