cbcvebase.

Frappe Technologies Frappe Framework vulnerabilities

1 known vulnerability affecting frappe_technologies/frappe_framework.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2023-54345P2HIGHCVSS 8.8v13.4.02026-05-05
CVE-2023-54345 [HIGH] CWE-94 CVE-2023-54345: Frappe Framework ERPNext 13.4.0 contains a sandbox escape vulnerability in RestrictedPython that all Frappe Framework ERPNext 13.4.0 contains a sandbox escape vulnerability in RestrictedPython that allows authenticated users with System Manager role to execute arbitrary code by exploiting frame introspection. Attackers can create a server script via the /app/server-script endpoint and access the gi_frame attribute to traverse the call stack and invoke
nvd
Frappe Technologies Frappe Framework vulnerabilities | cvebase