← Back to browse · API

CVE-2024-23538

Severity
CRITICAL
CVSS
9.9
EPSS
0.01291
Risk score
40.05
CISA KEV
No
PoC
No
Published
2024-03-29
Modified
2025-02-13
First seen
2026-08-07
Aliases
EUVD-2024-21033, GHSA-X73G-5X4F-9MQR
Products
Apache Software Foundation:Apache Fineract, Apache Software Foundation:Apache Fineract 0 <1.8.5
Sources
euvd EUVD-2024-21033

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Fineract.This issue affects Apache Fineract: <1.8.5. Users are recommended to upgrade to version 1.8.5 or 1.9.0, which fix the issue.

References