Beveiligingsadvies

CVE-2022-41712

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-11-25 00:00:00

Laatst bijgewerkt 2025-04-29 14:41:11

Toegewezen door Fluid Attacks

CVSS-score 6.5

Status PUBLISHED

Beschrijving

Frappe version 14.10.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not correctly validate the information injected by the user in the import_file parameter.

← Alle CVE's bekijken Bekijk op cve.org ↗