CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Apache. It involves a SQL injection risk.
CVE
CVE-2018-1290
Severity
CRITICAL
CVSS
9.8
EPSS
3.42%
Apache
Original NVD Description
In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, Using a single quotation escape with two continuous SQL parameters can cause a SQL injection. This could be done in Methods like retrieveAuditEntries of AuditsApiResource Class and retrieveCommands of MakercheckersApiResource Class.
Related CVEs
Other vulnerabilities affecting the same vendor(s)