Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-41712
6.5
MEDIUMCVSS v3
Severity scale
010
Description
Frappe version 14.10.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not correctly validate the information injected by the user in the import_file parameter.
frappe/frappe
GitHubLow code web framework for real world applications, in Python and Javascript
GitHubLow code web framework for real world applications, in Python and Javascript= 14.10.0NVD
FrappeNuGet GalleryThe core implementation library for Frappe. Frappe is a compile time bundler for JavaScript, Css, and Less for high volume, high performance ASP.NET sites.
NuGet GalleryThe core implementation library for Frappe. Frappe is a compile time bundler for JavaScript, Css, and Less for high volume, high performance ASP.NET sites.= 14.10.0NVD
Crates.io
NPM