Apache Fineract SQL Injection Vulnerability (CNVD-2024-16106)

Apache Fineract is a set of open source digital financial services platform from the U.S. Apache Apache Foundation. The platform can provide users with data management, loan and savings portfolio management and real-time financial data and other functions. Apache Fineract versions prior to 1.8.5...

PT-2017-16655

Name of the Vulnerable Software and Affected Versions Apache Fineract versions 0.4.0-incubating through 0.6.0-incubating Description The issue allows an authenticated user with specific read permissions to inject malicious SQL into SELECT queries. This is possible due to the lack of sanitization ...

CVE-2017-5663: Improper Neutralization of Special Elements used in an SQL Command

In Apache Fineract 0.4.0-incubating, 0.5.0-incubating, and 0.6.0-incubating, an authenticated user with client/loan/center/staff/group read permissions is able to inject malicious SQL into SELECT queries. The 'sqlSearch' parameter on a number of endpoints is not sanitized and appended directly to...