Page History

...

Amendment of November 29, 2022:  In order to ensure that users are given warning of critical issues, the Apache Fineract project may use its relationship with the independent Mifos Initiative to ensure that users of the Fineract backend and Mifos front end UI are informed of such vulnerabilities and are able to assist in testing and validating patches.  

The Apache Fineract project recommends that you secure the platform by not running it directly on the internet.  IP filtering and other techniques may be essential for all API ingress.  In particular, simply running the solution in default mode, using other open source projects that may bundle with fineract, is not considered best practice for a production environment of fineract unless additional security layers and practices are added.  

...