Not rated
CVE-2025-58137 Authorization Bypass Through User-Controlled Key vulnerability in Apache Fineract
Description
Authorization Bypass Through User-Controlled Key vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11.0. The issue is fixed in version 1.12.1. Users are encouraged to upgrade to version 1.13.0, the latest release.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Fineract 1.12 | earliest → < 1.12.1 | 1.12.1 |
| Apache Fineract 1.11 | earliest → 1.11.0 | No fix stated |
Other CVEs of Apache Fineract
The 22 CVEs of Apache Fineract →
CVE-2026-64618
Apache Fineract: SQL injection vulnerability in Search API
Not rated
CVE-2026-65874
Apache Fineract: SQL injection via ORDER BY parameters in the Center and datatables endpoints
Not rated
CVE-2026-57821
A SQL Injection vulnerability exists in Apache Fineract's Office Search API (GET /api/v1/offices) in versions up to…
Not rated
CVE-2026-35152
A SQL Injection vulnerability exists in Apache Fineract's Report Execution API (runreports endpoint) in versions up to…
Not rated