CVE-2019-14965

An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. A server side template injection SSTI issue exists...

CVE-2019-14966

An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. There exists an authenticated SQL injection...

CVE-2019-14966

CVE-2019-14966 affects Frappe Framework versions 10 through 12 prior to 12.0.4, introducing an authenticated SQL injection vulnerability. The issue is addressed in 12.0.4 (and later); upgrade to 12.0.4+ to mitigate. The available connected documents confirm the vulnerability and the fixed release...

CVE-2019-14966

An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. There exists an authenticated SQL injection...

CVE-2019-14967

An issue was discovered in Frappe Framework 10, 11 before 11.1.46, and 12. There exists an XSS vulnerability...

CVE-2019-14967

An issue was discovered in Frappe Framework 10, 11 before 11.1.46, and 12. There exists an XSS vulnerability...

CVE-2019-14967

Frappe Framework versions 10 and 11 before 11.1.46, and 12 contain an XSS vulnerability that can be exploited to execute client-side code. Remediation: upgrade to 11.1.46 or later (the fixed version referenced in linked advisories). If upgrading, verify that affected components are updated to a v...

CVE-2019-14967: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Frappe Framework 10, 11 before 11.1.46, and 12. There exists an XSS vulnerability...

CVE-2019-14965: Improper Control of Generation of Code

An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. A server side template injection SSTI issue exists...

PT-2019-13899

Name of the Vulnerable Software and Affected Versions Frappe Framework versions 10 through 12 before 12.0.4 Description A server-side template injection issue exists. This issue allows for the injection of templates on the server side, potentially leading to unauthorized access or data...

PT-2019-13900

Name of the Vulnerable Software and Affected Versions Frappe Framework versions 10 through 12 before 12.0.4 Description An issue was discovered that allows for authenticated SQL injection. Recommendations For Frappe Framework versions 10 through 12 before 12.0.4, update to version 12.0.4 or later...

PT-2019-13901

Name of the Vulnerable Software and Affected Versions Frappe Framework versions 10, 11 through 11.1.45, and 12 Description An issue was discovered that results in an XSS vulnerability. Recommendations For Frappe Framework version 10, update to a version after 10. For Frappe Framework version 11,...

CVE-2019-14966: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. There exists an authenticated SQL injection...