← Back to CVE List

CVE-2019-15700

Published: 2019-08-27T18:15Z
Last Modified: 2024-11-21T04:29Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
public/js/frappe/form/footer/timeline.js in Frappe Framework 12 through 12.0.8 does not escape HTML in the timeline and thus is affected by crafted "changed value of" text. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt