CVE-2022-44635
Apache Fineract allowed an authenticated user to perform remote code execution due to path traversal
概要
Apache Fineract allowed an authenticated user to perform remote code execution due to path traversal
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Apache Fineract allowed an authenticated user to perform remote code execution due to a path traversal vulnerability in a file upload component of Apache Fineract, allowing an attacker to run remote code. This issue affects Apache Fineract version 1.8.0 and prior versions. We recommend users to upgrade to 1.8.1.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web lists.apache.org
- web openwall.com