Tag :
1. About CVE-2022-44635
| Vulnerability Name | Apache Fineract File Upload Vulnerability |
|---|---|
| Attack Type | Arbitrary File Upload |
| Time Discovered | 2022-12-01 |
| Updated Time | 2022-12-01 |
| CVE ID | CVE-2022-44635 |
2. Summary
This vulnerability exists in the file upload component of Apache Fine. Due to improper handling of the upload path, there is a directory traversal problem. An authenticated attacker can use this vulnerability to upload malicious files on a remote server, execute remote code execution attacks, and finally obtain the highest privileges of the server.
3. Affected Versions
Apache Fineract ≤ 1.8.0
4. Solution
Currently, the vendor had issued a security patch to fix the vulnerability. The official link is as follows: https://fineract.apache.org
