Lucene search

PRIOn knowledge basePRION:CVE-2023-25197

HistoryMar 28, 2023 - 12:15 p.m.

Sql injection

2023-03-2812:15:00

PRIOn knowledge base

www.prio-n.com

improper neutralization

special elements

sql command

vulnerability

apache software foundation

fineract

authorized users

limited impact

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.1%

JSON

Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Apache Software Foundation apache fineract. Authorized users may be able to exploit this for limited impact on components. This issue affects apache fineract: from 1.4 through 1.8.2.

CPENameOperatorVersion
fineractge1.4.0
fineractle1.8.2

CPE	Name	Operator	Version
	fineract	ge	1.4.0
	fineract	le	1.8.2

References

lists.apache.org/thread/v0q9x86sx6f6l2nzr1z0nwm3y9qlng04