Boletines de Vulnerabilidades

CVE-2023-46127

   
Software afectado MARIADB
 
Frappe is a full-stack web application framework that uses Python and MariaDB on the server side and an integrated client side library. A malicious Frappe user with desk access could create documents containing HTML payloads allowing HTML Injection. This vulnerability has been patched in version 14.49.0.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2023-46127