CVE-2025-23408: Apache Fineract: weak password policy
Weak Password Requirements vulnerability in Apache Fineract.
This issue affects Apache Fineract: through 1.10.1. The issue is fixed in version 1.11.0.
Users are encouraged to upgrade to version 1.13.0, the latest release.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apache Fineractto a version that resolves this vulnerability.Fixed in 1.11.0 - Upgrade
Upgrade
Apache Fineractto a version that resolves this vulnerability.Fixed in 1.13.0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-23408?
The CVE-2025-23408 vulnerability is classified as a weak password requirement issue affecting Apache Fineract.
How do I fix CVE-2025-23408?
To remediate CVE-2025-23408, upgrade Apache Fineract to version 1.11.0 or later.
Which versions of Apache Fineract are affected by CVE-2025-23408?
CVE-2025-23408 affects Apache Fineract versions prior to 1.11.0.
What should users do if they are using version 1.10.1 of Apache Fineract concerning CVE-2025-23408?
Users on version 1.10.1 should upgrade to at least version 1.11.0 to address CVE-2025-23408.
Is there a recommended version to upgrade to in relation to CVE-2025-23408?
It is recommended to upgrade to version 1.13.0 of Apache Fineract for the best security practices against CVE-2025-23408.