CVE-2024-24813

Published: 2024-03-21T02:52Z

Last Modified: 2024-11-21T08:59Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Frappe is a full-stack web application framework. Prior to versions 14.64.0 and 15.0.0, SQL injection from a particular whitelisted method can result in access to data which the user doesn't have permission to access. Versions 14.64.0 and 15.0.0 contain a patch for this issue. No known workarounds are available. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt