Aman Sapra

**Name of the Vulnerable Software and Affected Versions** Apache Fineract versions prior to 1.14.1 **Description** An authenticated user with permissions to view clients can exploit a boolean-based SQL Injection in the Client Search API endpoint '/api/v1/clients'. The issue occurs because the `orderBy` and `sortOrder` parameters are concatenated into a SQL query without sufficient validation. This allows for blind boolean-based data extraction and, specifically on MySQL or MariaDB, the disclosure of arbitrary files readable by the database process through the `LOAD FILE()` function. **Recommendations** Upgrade to a version containing the fix. As a temporary mitigation, restrict the use of the `orderBy` and `sortOrder` parameters in the '/api/v1/clients' endpoint.

**Name of the Vulnerable Software and Affected Versions** Apache Fineract versions prior to 1.8.1 **Description** Apache Fineract allowed an authenticated user to perform remote code execution due to a path traversal vulnerability in a file upload component, allowing an attacker to run remote code. **Recommendations** For Apache Fineract versions prior to 1.8.1, upgrade to version 1.8.1 to resolve the issue. As a temporary workaround, consider restricting access to the file upload component to minimize the risk of exploitation.