CVE-2025-58137 — Apache Fineract: IDOR via self-service API
Authorization Bypass Through User-Controlled Key vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11.0. The issue is fixed in version 1.12.1. Us…
Published: 2025-12-12 · CVSS: 8.1 · CVSS 3.1
Authorization Bypass Through User-Controlled Key vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11.0. The issue is fixed in version 1.12.1. Users are encouraged to upgrade to version 1.13.0, the latest release.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7