Fineract Security Vulnerabilities and Issues — Fineract CVE List

Lucene search

ApacheFineract

2 matches found

CVE•added 2021/05/27 12:15 p.m.•35 views

CVE-2020-17514

Apache Fineract prior to 1.5.0 disables HTTPS hostname verification in ProcessorHelper in the configureClient method. Under typical deployments, a man in the middle attack could be successful.

7.4CVSS7.3AI score0.01087EPSS

CVE•added 2020/10/13 7:15 p.m.•26 views

CVE-2018-20243

The implementation of POST with the username and password in the URL parameters exposed the credentials. More infomration is available in fineract jira issues 726 and 629.

7.5CVSS7.6AI score0.00681EPSS