Lucene search
HistoryMar 29, 2024 - 3:15 p.m.
CVE-2024-23539
cve-2024-23539
apache fineract
sql injection
vulnerability
upgrade
8.3 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
0.0004 Low
EPSS
Percentile
15.8%
Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Apache Fineract.This issue affects Apache Fineract: <1.8.5.
Users are recommended to upgrade to version 1.8.5 or 1.9.0, which fix the issue.
Related
cvelist
cvelist
cve
cve
CVE-2024-23539
2024-03-29 15:15:10
cnvd
cnvd
Apache Fineract SQL Injection Vulnerability (CNVD-2024-16106)
2024-04-02 00:00:00
8.3 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
0.0004 Low
EPSS
Percentile
15.8%
Related for NVD:CVE-2024-23539