Frappe
Page 3 of 3 — Frappe CVEs from a corpus of 206, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-3885 | High | 8.8 | 2018-09-12 | An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web requests can cause SQL injections resulti… |
CVE-2018-3884 | High | 8.8 | 2018-09-12 | An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web requests can cause SQL injections resulti… |
CVE-2018-3883 | High | 8.8 | 2018-09-12 | An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web requests can cause SQL injections resulti… |
CVE-2018-3882 | High | 8.8 | 2018-09-12 | An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web requests can cause SQL injections resulti… |
CVE-2018-11339 | Medium | 6.1 | 2018-05-22 | An XSS issue was discovered in Frappe ERPNext v11.x.x-develop b1036e5 via a comment. |
CVE-2017-1000120 | High | 8.8 | 2017-10-05 | [ERPNext][Frappe Version <= 7.1.27] SQL injection vulnerability in frappe.share.get_users allows remote authenticated users to execute arbitrary SQL commands v… |