CVE-2018-11800

CRITICAL

Apache Fineract <1.3.0 - SQL Injection

Title source: llm

Description

SQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary SQL commands via a query on the GroupSummaryCounts related table.

References (3)

Scores

CVSS v3 9.8
EPSS 0.0332
EPSS Percentile 87.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-89
Status published

Affected Products (1)

apache/fineract < 1.3.0

Timeline

Published Jun 11, 2019
Tracked Since Feb 18, 2026