8.9 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
44.6%
[ERPNext][Frappe Version <= 7.1.27] SQL injection vulnerability in frappe.share.get_users allows remote authenticated users to execute arbitrary SQL commands via the fields parameter.
tech.mantz-it.com/2016/12/sql-injection-in-frappe-framework.html