CVE-2025-58130: Apache Fineract: Server Key not masked
Insufficiently Protected Credentials vulnerability in Apache Fineract.
This issue affects Apache Fineract: through 1.11.0. The issue is fixed in version 1.12.1.
Users are encouraged to upgrade to version 1.13.0, the latest release.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apache Fineractto a version that resolves this vulnerability.Fixed in 1.12.1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58130?
CVE-2025-58130 is classified as a vulnerability affecting Apache Fineract due to insufficiently protected credentials.
How do I fix CVE-2025-58130?
To fix CVE-2025-58130, users should upgrade to version 1.12.1 or later of Apache Fineract.
Which versions of Apache Fineract are affected by CVE-2025-58130?
CVE-2025-58130 affects Apache Fineract versions up to and including 1.11.0.
What steps should I take if I'm using a vulnerable version of Apache Fineract?
If using a vulnerable version of Apache Fineract, you should immediately upgrade to version 1.12.1 or later to mitigate the risk.
Is there a patch available for CVE-2025-58130?
Yes, a patch for CVE-2025-58130 is included in version 1.12.1 and later releases of Apache Fineract.