CVE-2017-1000120

2017-10-0501:29:04

Google

osv.dev

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.6%

JSON

[ERPNext][Frappe Version <= 7.1.27] SQL injection vulnerability in frappe.share.get_users allows remote authenticated users to execute arbitrary SQL commands via the fields parameter.

CPENameOperatorVersion
frappeeq5.0.21
frappeeq6.0.5
frappeeq6.24.4
frappeeq6.25.1
frappeeq6.23.2
frappeeq5.0.18
frappeeq3.9.2
frappeeq4.5.1
frappeeq5.0.26
frappeeq6.20.1