CVE-2023-41328

2023-09-0618:15:09

Google

osv.dev

frappe

python

javascript

sql injection

vulnerability

upgrade

AI Score

8.2

Confidence

Low

EPSS

0.001

Percentile

41.3%

JSON

Frappe is a low code web framework written in Python and Javascript. A SQL Injection vulnerability has been identified in the Frappe Framework which could allow a malicious actor to access sensitive information. This issue has been addressed in versions 13.46.1 and 14.20.0. Users are advised to upgrade. There’s no workaround to fix this without upgrading.