Insufficiently Protected Credentials in Apache Fineract by Apache

CVE-2025-58130

What is CVE-2025-58130?

The Insufficiently Protected Credentials vulnerability in Apache Fineract leaves sensitive information unprotected in earlier versions of the software. This weakness could potentially allow unauthorized access to user credentials and sensitive data. To mitigate risks, it is crucial for users to upgrade to version 1.12.1 or later. The latest version, 1.13.0, includes fixes that enhance security and protect against potential exploits related to this vulnerability.

References