Boletines de Vulnerabilidades |
CVE-2023-46127 |
|
| Software afectado | MARIADB |
| Frappe is a full-stack web application framework that uses Python and MariaDB on the server side and an integrated client side library. A malicious Frappe user with desk access could create documents containing HTML payloads allowing HTML Injection. This vulnerability has been patched in version 14.49.0. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2023-46127 | |














