CVE-2023-41328
Frappe is a low code web framework written in Python and Javascript. A SQL Injection vulnerability has been identified in the Frappe Framework which could allow a malicious actor to access sensitive information. This issue has been addressed in versions 13.46.1 and 14.20.0. Users are advised to upgrade. There's no workaround to fix this without upgrading.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - security-advisories@github.com
- Published
- 2023-09-06
- Last modified
- 2024-09-26
- Weaknesses
- CWE-89
Affected products
References
- https://github.com/frappe/frappe/releases/tag/v13.46.1
- https://github.com/frappe/frappe/releases/tag/v14.20.0
- https://github.com/frappe/frappe/security/advisories/GHSA-53wh-f67g-9679
