CVE-2023-41328
Possibility limited SQL injection due to insufficient validation in Frappe
概要
Possibility limited SQL injection due to insufficient validation in Frappe
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Frappe is a low code web framework written in Python and Javascript. A SQL Injection vulnerability has been identified in the Frappe Framework which could allow a malicious actor to access sensitive information. This issue has been addressed in versions 13.46.1 and 14.20.0. Users are advised to upgrade. There's no workaround to fix this without upgrading.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com
- web github.com