exploitDog

CVE-2019-14967

Опубликовано: 12 авг. 2019

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

An issue was discovered in Frappe Framework 10, 11 before 11.1.46, and 12. There exists an XSS vulnerability.

Ссылки

https://github.com/frappe/frappe/compare/v11.1.45...v11.1.46
Patch
Third Party Advisory
https://github.com/frappe/frappe/pull/7981
Third Party Advisory
https://github.com/frappe/frappe/releases/tag/v11.1.46
Third Party Advisory
https://github.com/frappe/frappe/compare/v11.1.45...v11.1.46
Patch
Third Party Advisory
https://github.com/frappe/frappe/pull/7981
Third Party Advisory
https://github.com/frappe/frappe/releases/tag/v11.1.46
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:frappe:frappe:*:*:*:*:*:*:*:*

Версия от 11.0.0 (включая) до 11.1.46 (исключая)

cpe:2.3:a:frappe:frappe:10.0.0:*:*:*:*:*:*:*

cpe:2.3:a:frappe:frappe:12.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 53%

0.00307

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-66hv-84j4-2xf5

CVSS3: 6.1

github

больше 3 лет назад

An issue was discovered in Frappe Framework 10, 11 before 11.1.46, and 12. There exists an XSS vulnerability.

EPSS

Процентиль: 53%

0.00307

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79