CVE-2020-35175
First published: Fri Dec 11 2020(Updated: )
Frappe Framework 12 and 13 does not properly validate the HTTP method for the frappe.client API.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Frappe Frappe | >=12.0.0<=12.12.0 | |
| Frappe Frappe | =13.0.0-beta1 | |
| Frappe Frappe | =13.0.0-beta2 | |
| Frappe Frappe | =13.0.0-beta3 | |
| Frappe Frappe | =13.0.0-beta4 | |
| Frappe Frappe | =13.0.0-beta5 | |
| Frappe Frappe | =13.0.0-beta6 | |
| Frappe Frappe | =13.0.0-beta7 | |
| Frappe Frappe | =13.0.0-beta8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-35175?
CVE-2020-35175 is a vulnerability in Frappe Framework 12 and 13 that allows improper validation of the HTTP method for the frappe.client API.
What is the severity of CVE-2020-35175?
CVE-2020-35175 has a severity value of 5.3, which is considered medium.
How does CVE-2020-35175 affect Frappe Framework?
CVE-2020-35175 affects Frappe Framework versions 12 and 13, allowing improper validation of the HTTP method for the frappe.client API.
What is the fix for CVE-2020-35175?
To fix CVE-2020-35175, it is recommended to update Frappe Framework to a version that includes the relevant security patches.
Where can I find more information about CVE-2020-35175?
You can find more information about CVE-2020-35175 on the following references: [link1](https://github.com/frappe/frappe/pull/11228), [link2](https://github.com/frappe/frappe/pull/11237).
- collector/nvd-index
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/references
- agent/description
- agent/softwarecombine
- agent/remedy
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/frappe
- canonical/frappe frappe
- version/frappe frappe/12.0.0
- version/frappe frappe/12.12.0
- version/frappe frappe/13.0.0-beta1
- version/frappe frappe/13.0.0-beta2
- version/frappe frappe/13.0.0-beta3
- version/frappe frappe/13.0.0-beta4
- version/frappe frappe/13.0.0-beta5
- version/frappe frappe/13.0.0-beta6
- version/frappe frappe/13.0.0-beta7
- version/frappe frappe/13.0.0-beta8