CVE-2023-25195

8.1 highEPSS 1.0%

High (8.1) in apache fineract. EPSS 1.0% chance of exploitation in the next 30 days.

Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache Fineract. Authorized users with limited permissions can gain access to server and may be able to use server for any outbound traffic. This issue affects Apache Fineract: from 1.4 through 1.8.3.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-918
Published: 2023-03-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apache:fineract

References

https://lists.apache.org/thread/m58fdjmtkfp9h4c0r4l48rv995w3qhb6
https://lists.apache.org/thread/m58fdjmtkfp9h4c0r4l48rv995w3qhb6

Check your stack JSON