CVE-2023-25195CWE-918

Apache Fineract: SSRF template type vulnerability in certain authenticated users

High · published March 28, 2023

CVSS v3.1
8.1
EPSS
1%
Percentile
62.0
In the wild
Unconfirmed
What it is

Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache Fineract.

Authorized users with limited permissions can gain access to server and may be able to use server for any outbound traffic.

This issue affects Apache Fineract: from 1.4 through 1.8.3.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00982 · 62.0th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2023-03-28T11:16Z
EPSS history
Timeline
  • 28 MAR 11:16Z
    Apache Fineract: SSRF template type vulnerability in certain authenticated users
    cvelistv5