| ID | 1090501685 |
| Created | Feb 28, 2023 |
| Updated | Feb 28, 2023 |
| Severity |
|
| Default Action | pass |
| Active |
|
| Affected OS | All |
| Affected App | Apache |
| Engine Version | 5.0.0 or later |
Legend
| Enabled/Available |
|
| Disabled/Not Available |
|
Update History
| Date | Version | Detail |
|---|---|---|
| 2023-02-28 | 0.00342 |
Refine Search
Threat Encyclopedia
Apache.Fineract.ImagesApiResource.Arbitrary.File.Upload
Description
This indicates an attack attempt to exploit an Arbitrary File Upload Vulnerability in Apache Software Foundation Fineract.
The vulnerability is due to insufficient sanitation of paths during file uploads. A remote, authenticated attacker could exploit this vulnerability by sending crafted requests to the target server. Successful exploitation could lead to code execution in the context of the server process.
Affected Products
Apache Software Foundation Fineract prior to 1.8.1
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://lists.apache.org/thread/t8q6fmh3o6yqmy69qtqxppk9yg9wfybg