CVEvulnerability

CVE-2023-25195

8.1 HIGH Published 2023-03-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-03-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-918

Description

Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache Fineract. Authorized users with limited permissions can gain access to server and may be able to use server for any outbound traffic.  This issue affects Apache Fineract: from 1.4 through 1.8.3.

Affected configurations

• apache fineract (>= 1.4.0 <= 1.8.3)

Related

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References