high8.8
CVE-2019-14966
An issue was discovered in Frappe Framework 10 through 12 before 12.0.4.
Impact
An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. There exists an authenticated SQL injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Frappe | Frappe | from 10.0.0 through 12.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/frappe/frappe/compare/v12.0.3...v12.0.4
- https://github.com/frappe/frappe/pull/8044
- https://github.com/frappe/frappe/pull/8045
- https://github.com/frappe/frappe/pull/8046
- https://github.com/frappe/frappe/pull/8047
- https://github.com/frappe/frappe/releases/tag/v12.0.4
- https://github.com/frappe/frappe/compare/v12.0.3...v12.0.4
- https://github.com/frappe/frappe/pull/8044
- https://github.com/frappe/frappe/pull/8045
- https://github.com/frappe/frappe/pull/8046
- https://github.com/frappe/frappe/pull/8047
- https://github.com/frappe/frappe/releases/tag/v12.0.4