CVE-2026-64618
|
| |
|
|
Software afectado |
APACHE |
|
|
|
Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") vulnerability exists in Apache Fineract (through version 1.15.0). The vulnerability affects the outStandingAmountPercentageCondition parameter of the /fineract-provider/api/v1/search/advance HTTP API endpoint, allowing SQL injection due to insufficient input neutralization. Users are recommended to upgrade to version 1.16.1, which will fix the issue. |
Link: |
| https://nvd.nist.gov/vuln/detail/CVE-2026-64618 |
