CVE-2022-3988

Advisory

This is a placeholder package for the original Frappe Framework where a vulnerability was found. The vulnerability affects versions up to 14.14.3 and allows an external attacker to remotely obtain arbitrary local files. It is recommended to apply a patch to fix this issue.
https://github.com/advisories/GHSA-rfgc-5r25-fw46
https://github.com/frappe/frappe/commit/bfab7191543961c6cb77fe267063877c31b616ce

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3988
• https://vuldb.com/?id.213560
• https://github.com/frappe/frappe/commit/bfab7191543961c6cb77fe267063877c31b616ce
• https://github.com/frappe/frappe/pull/18847