CVE-2024-27105

Published: 2024-03-21T02:52Z

Last Modified: 2024-11-21T09:03Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Frappe is a full-stack web application framework. Prior to versions 14.66.3 and 15.16.0, file permission can be bypassed using certain endpoints, granting less privileged users permission to delete or clone a file. Versions 14.66.3 and 15.16.0 contain a patch for this issue. No known workarounds are available. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt