A vulnerability was found in Frappe. It has been rated as problematic. Affected by this issue is some unknown functionality of the file frappe/templates/includes/navbar/navbar_search.html of the component Search. The manipulation of the argument q leads to cross site scripting. The attack may be launched remotely. The name of the patch is bfab7191543961c6cb77fe267063877c31b616ce. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-213560.
References
Link | Resource |
---|---|
https://github.com/frappe/frappe/commit/bfab7191543961c6cb77fe267063877c31b616ce | Patch Third Party Advisory |
https://github.com/frappe/frappe/pull/18847 | Patch Third Party Advisory |
https://vuldb.com/?id.213560 | Permissions Required Third Party Advisory VDB Entry |
Configurations
History
16 Nov 2022, 18:56
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:frappe:frappe:*:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
CWE | CWE-707 |
|
First Time |
Frappe
Frappe frappe |
|
References | (N/A) https://vuldb.com/?id.213560 - Permissions Required, Third Party Advisory, VDB Entry | |
References | (N/A) https://github.com/frappe/frappe/commit/bfab7191543961c6cb77fe267063877c31b616ce - Patch, Third Party Advisory | |
References | (N/A) https://github.com/frappe/frappe/pull/18847 - Patch, Third Party Advisory |
14 Nov 2022, 11:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-11-14 11:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-3988
Mitre link : CVE-2022-3988
CVE.ORG link : CVE-2022-3988
JSON object : View
Products Affected
frappe
- frappe