Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 7:33 a.m.13 views

CVE-2024-23538

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Fineract.This issue affects Apache Fineract: 1.8.5. Users are recommended to upgrade to version 1.8.5 or 1.9.0, which fix the issue...

9.9CVSS7.5AI score0.01291EPSS
Exploits0References1
NVD
NVD
added 2024/03/29 3:15 p.m.19 views

CVE-2024-23538

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Fineract.This issue affects Apache Fineract: 1.8.5. Users are recommended to upgrade to version 1.8.5 or 1.9.0, which fix the issue...

9.9CVSS9.9AI score0.01291EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/03/29 2:37 p.m.14 views

CVE-2024-23538 Apache Fineract: Under certain system configurations, the sqlSearch parameter was vulnerable to SQL injection attacks, potentially allowing attackers to manipulate database queries.

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Fineract.This issue affects Apache Fineract: 1.8.5. Users are recommended to upgrade to version 1.8.5 or 1.9.0, which fix the issue...

9.9CVSS7.6AI score0.01291EPSS
Exploits0References3
CVE
CVE
added 2024/03/29 2:37 p.m.83 views

CVE-2024-23538

CVE-2024-23538 concerns Apache Fineract prior to version 1.8.5, where an SQL Injection can be triggered by improper neutralization in the sqlSearch parameter. The vulnerability stems from unsafely constructed SQL statements, enabling an attacker to view, modify, or delete data in the backend data...

9.9CVSS9.9AI score0.01291EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2024/03/29 2:37 p.m.22 views

CVE-2024-23538 Apache Fineract: Under certain system configurations, the sqlSearch parameter was vulnerable to SQL injection attacks, potentially allowing attackers to manipulate database queries.

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Fineract.This issue affects Apache Fineract: 1.8.5. Users are recommended to upgrade to version 1.8.5 or 1.9.0, which fix the issue...

9.9CVSS10AI score0.01291EPSS
Exploits0References3
OSV
OSV
added 2024/03/29 2:37 p.m.10 views

CVE-2024-23538 Apache Fineract: Under certain system configurations, the sqlSearch parameter was vulnerable to SQL injection attacks, potentially allowing attackers to manipulate database queries.

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Fineract.This issue affects Apache Fineract: 1.8.5. Users are recommended to upgrade to version 1.8.5 or 1.9.0, which fix the issue...

9.9CVSS6AI score0.01291EPSS
Exploits0References5
Rows per page
Query Builder