CVE-2023-25195: Apache Fineract: SSRF template type vulnerability in certain authenticated users
Published Mar 28, 2023
·Updated
Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache Fineract. Authorized users with limited permissions can gain access to server and may be able to use server for any outbound traffic.
This issue affects Apache Fineract: from 1.4 through 1.8.3.
Affected Software
1 affected component
Apache Fineract>=1.4.0<=1.8.3
Event History
Mar 28, 2023
CVE Published
via MITRE·11:16 AM
Data Sourced
via MITRE·11:16 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-25195?
The severity of CVE-2023-25195 is high.
2
Who is affected by CVE-2023-25195?
Apache Fineract versions 1.4 through 1.8.3 are affected by CVE-2023-25195.
3
What is the vulnerability in CVE-2023-25195?
CVE-2023-25195 is a Server-Side Request Forgery (SSRF) vulnerability in Apache Fineract.
4
How can an attacker exploit CVE-2023-25195?
An attacker with limited permissions can exploit CVE-2023-25195 to gain access to the server and use it for outbound traffic.
5
Is there a fix available for CVE-2023-25195?
There is no known fix available for CVE-2023-25195. It is recommended to update to a newer version of Apache Fineract when one becomes available.