Apache Fineract SQL injection vulnerability

Apache Fineract versions 1.15.0 and earlier contain an SQL injection vulnerability. This vulnerability arises because the Center read endpoint and the datatable entry read endpoint directly append the orderBy, sortOrder, and order parameters provided by callers to the SQL ORDER BY clause. Existin...