CVE-2024-23539

CVSS 3.1 Score 8.3 of 10 (high)

Details

Published Mar 29, 2024
Updated: May 1, 2024
CWE ID 89

Summary

CVE-2024-23539 is an SQL Injection vulnerability affecting Apache Fineract versions prior to 1.8.5. Hackers can exploit this flaw by introducing malicious SQL commands, potentially leading to unauthorized access or data leakage. Users are strongly advised to upgrade to the latest versions, 1.8.5 or 1.9.0, to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share