CVE-2023-41328: Possibility limited SQL injection due to insufficient validation in Frappe
Frappe is a low code web framework written in Python and Javascript. A SQL Injection vulnerability has been identified in the Frappe Framework which could allow a malicious actor to access sensitive information. This issue has been addressed in versions 13.46.1 and 14.20.0. Users are advised to upgrade. There's no workaround to fix this without upgrading.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-41328?
CVE-2023-41328 is a SQL Injection vulnerability in the Frappe Framework that could allow an attacker to access sensitive information.
How does CVE-2023-41328 impact users?
CVE-2023-41328 could potentially allow a malicious actor to access sensitive information through SQL Injection.
Which versions of Frappe Framework are affected by CVE-2023-41328?
Versions up to 13.46.1 and versions between 14.0.0 and 14.20.0 of Frappe Framework are affected by CVE-2023-41328.
How can users mitigate the vulnerability?
Users should upgrade their Frappe Framework to versions 13.46.1 or 14.20.0, which address the CVE-2023-41328 vulnerability.
Where can I find more information about CVE-2023-41328?
More information about CVE-2023-41328 can be found in the references provided: [link1], [link2], [link3].