CVE-2019-14967: XSS
Published Aug 12, 2019
·Updated
An issue was discovered in Frappe Framework 10, 11 before 11.1.46, and 12. There exists an XSS vulnerability.
Affected Software
3 affected components
Frappe frappe>=11.0.0<11.1.46
Frappe frappe=10.0.0
Frappe frappe=12.0.0
Remediation
Patch Available
Event History
Aug 12, 2019
CVE Published
via MITRE·05:21 PM
Data Sourced
via MITRE·05:21 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this Frappe Framework XSS vulnerability?
The vulnerability ID for this Frappe Framework XSS vulnerability is CVE-2019-14967.
2
What is the severity of CVE-2019-14967?
The severity of CVE-2019-14967 is medium with a CVSS score of 6.1.
3
Which version of Frappe Framework is affected by CVE-2019-14967?
Frappe Framework versions 10 (specifically 10.0.0), 11 (before 11.1.46), and 12 are affected by CVE-2019-14967.
4
What is the Common Weakness Enumeration (CWE) ID for CVE-2019-14967?
The Common Weakness Enumeration (CWE) ID for CVE-2019-14967 is CWE-79.
5
How can I fix the XSS vulnerability in Frappe Framework?
To fix the XSS vulnerability in Frappe Framework, update to version 11.1.46 or higher.