Lucene search

K
cvelistMitreCVELIST:CVE-2017-1000120
HistoryOct 03, 2022 - 4:23 p.m.

CVE-2017-1000120

2022-10-0316:23:10
mitre
www.cve.org
cve-2017-1000120
erpnext
frappe
sql injection
vulnerability
remote authenticated users
arbitrary sql commands

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.6%

[ERPNext][Frappe Version <= 7.1.27] SQL injection vulnerability in frappe.share.get_users allows remote authenticated users to execute arbitrary SQL commands via the fields parameter.

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.6%

Related for CVELIST:CVE-2017-1000120