Vulnerability Details CVE-2025-58137
Authorization Bypass Through User-Controlled Key vulnerability in Apache Fineract.
This issue affects Apache Fineract: through 1.11.0. The issue is fixed in version 1.12.1.
Users are encouraged to upgrade to version 1.13.0, the latest release.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 8.7%
CVSS Severity
CVSS v3 Score 8.1
Products affected by CVE-2025-58137
-
cpe:2.3:a:apache:fineract:-
-
cpe:2.3:a:apache:fineract:0.1.2
-
cpe:2.3:a:apache:fineract:0.3.1
-
cpe:2.3:a:apache:fineract:0.3.2
-
cpe:2.3:a:apache:fineract:0.4.0
-
cpe:2.3:a:apache:fineract:0.4.0-incubating
-
cpe:2.3:a:apache:fineract:0.5.0
-
cpe:2.3:a:apache:fineract:0.5.0-incubating
-
cpe:2.3:a:apache:fineract:0.6.0
-
cpe:2.3:a:apache:fineract:0.6.0-incubating
-
cpe:2.3:a:apache:fineract:1.0.0
-
cpe:2.3:a:apache:fineract:1.1.0
-
cpe:2.3:a:apache:fineract:1.10.1
-
cpe:2.3:a:apache:fineract:1.11.0
-
cpe:2.3:a:apache:fineract:1.12.0
-
cpe:2.3:a:apache:fineract:1.2.0
-
cpe:2.3:a:apache:fineract:1.3.0
-
cpe:2.3:a:apache:fineract:1.4.0
-
cpe:2.3:a:apache:fineract:1.5.0
-
cpe:2.3:a:apache:fineract:1.6.0
-
cpe:2.3:a:apache:fineract:1.7.0
-
cpe:2.3:a:apache:fineract:1.7.1
-
cpe:2.3:a:apache:fineract:1.7.2
-
cpe:2.3:a:apache:fineract:1.7.3
-
cpe:2.3:a:apache:fineract:1.8.0
-
cpe:2.3:a:apache:fineract:1.8.1
-
cpe:2.3:a:apache:fineract:1.8.2
-
cpe:2.3:a:apache:fineract:1.8.3
-
cpe:2.3:a:apache:fineract:1.8.4
-
cpe:2.3:a:apache:fineract:1.9.0