PT-2025-50905 · Apache · Apache Fineract

Ádám Sághy + 1 · Published 2025-12-12 · Updated 2025-12-18 · CVE-2025-58130

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Apache Fineract versions through 1.11.0

Description A flaw exists in Apache Fineract related to insufficiently protected credentials. Upgrade to version 1.13.0, the latest release, to address this issue. The issue is resolved in version 1.12.1.

Recommendations Upgrade to version 1.13.0.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2025-58130

Affected Products

Apache Fineract

References · 8

• https://osv.dev/vulnerability/CVE-2025-58130 · Vendor Advisory
• https://lists.apache.org/thread/d9zpkc86zk265523tfvbr8w7gyr6onoy · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58130 · Security Note
• https://t.me/cveNotify/145579 · Telegram Post
• https://twitter.com/oss_security/status/1999285020025045302 · Twitter Post
• https://t.me/CVEtracker/39609 · Telegram Post
• http://openwall.com/lists/oss-security/2025/12/11/6 · Note
• https://t.me/cveNotify/146201 · Telegram Post