CVE-2018-20243 The implementation of POST with the username and password in the URL parameters exposed the credentials. More infomration is available in fineract jira issues 726 and 629.
HighCVSS 7.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The implementation of POST with the username and password in the URL parameters exposed the credentials. More infomration is available in fineract jira issues 726 and 629.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache fineract | >= 1.0.0, <= 1.3.0 | No fix listed |
| apache fineract | = 0.4.0-incubating | No fix listed |
| apache fineract | = 0.5.0-incubating | No fix listed |
| apache fineract | = 0.6.0-incubating | No fix listed |
References
- lists.apache.org exploit mailing-list patch third-party-advisory