[<prev] [next>] [day] [month] [year] [list]
Message-ID: <c69b4af1-c0a3-0938-f690-4c05227e6524@apache.org>
Date: Fri, 29 Mar 2024 14:29:17 +0000
From: Arnout Engelen <engelen@...che.org>
To: oss-security@...ts.openwall.com
Subject: CVE-2024-23537: Apache Fineract: Under certain circumstances, this
vulnerability allowed users, without specific permissions, to escalate
their privileges to any role.
Severity: important
Affected versions:
- Apache Fineract before 1.9.0
Description:
Improper Privilege Management vulnerability in Apache Fineract.This issue affects Apache Fineract: <1.8.5.
Users are recommended to upgrade to version 1.9.0, which fixes the issue.
Credit:
Yash Sancheti (reporter)
References:
https://cwiki.apache.org/confluence/display/FINERACT/Apache+Fineract+Security+Report
https://fineract.apache.org/
https://www.cve.org/CVERecord?id=CVE-2024-23537
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
