Vulnerability Database

314,432

Total vulnerabilities in the database

CVE-2023-25195

Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache Fineract. Authorized users with limited permissions can gain access to server and may be able to use server for any outbound traffic. 

This issue affects Apache Fineract: from 1.4 through 1.8.3.

  • Published: Mar 28, 2023
  • Updated: Nov 16, 2025
  • CVE: CVE-2023-25195
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.1
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CWEs:

Software From Fixed in
apache / fineract 1.4.0 1.8.3.x