Apache Fineract: SSRF template type vulnerability in certain authenticated users

CVE-2023-25195

What is CVE-2023-25195?

An SSRF vulnerability has been identified in Apache Fineract, which allows authorized users with limited permissions to exploit the server. This compromise can enable the malicious user to access internal resources and potentially leverage the server for unauthorized outbound communication. Affected versions range from 1.4 to 1.8.3, making it essential for users to review their security measures and apply patches as needed.

References