Lucene search
+L

4 matches found

NVD
NVD
added 2024/03/29 3:15 p.m.16 views

CVE-2024-23539

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Fineract.This issue affects Apache Fineract: 1.8.5. Users are recommended to upgrade to version 1.8.5 or 1.9.0, which fix the issue...

9.8CVSS8.6AI score0.01494EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/03/29 2:36 p.m.19 views

CVE-2024-23539 Apache Fineract: Under certain system configurations, the sqlSearch parameter for specific endpoints was vulnerable to SQL injection attacks, potentially allowing attackers to manipulate database queries.

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Fineract.This issue affects Apache Fineract: 1.8.5. Users are recommended to upgrade to version 1.8.5 or 1.9.0, which fix the issue...

8.3CVSS7.6AI score0.01494EPSS
Exploits0References3
CVE
CVE
added 2024/03/29 2:36 p.m.72 views

CVE-2024-23539

CVE-2024-23539 affects Apache Fineract up to version 1.8.5 (pre-1.8.5). The issue is an SQL Injection vulnerability arising from improper neutralization of special elements in the sqlSearch parameter of specific endpoints, enabling an attacker to view, add, modify, or delete information in the ba...

9.8CVSS9.3AI score0.01494EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2024/03/29 2:36 p.m.20 views

CVE-2024-23539 Apache Fineract: Under certain system configurations, the sqlSearch parameter for specific endpoints was vulnerable to SQL injection attacks, potentially allowing attackers to manipulate database queries.

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Fineract.This issue affects Apache Fineract: 1.8.5. Users are recommended to upgrade to version 1.8.5 or 1.9.0, which fix the issue...

8.3CVSS8.8AI score0.01494EPSS
Exploits0References3
Rows per page
Query Builder