← All advisories

Critical severity9.8NVD Advisory· Published Aug 12, 2019· Updated Jun 17, 2026

CVE-2019-14965

CVE-2019-14965

Description

An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. A server side template injection (SSTI) issue exists.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Frappe/Frappe2 versions
cpe:2.3:a:frappe:frappe:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:frappe:frappe:*:*:*:*:*:*:*:*range: >=10.0.0,<12.0.4
- (no CPE)range: <12.0.4
Frappe/Frappe Frameworkdescription
Frappe/Frappe Frameworkllm-fuzzy
Range: <12.0.4

Patches

Vulnerability mechanics

References

6

github.com/frappe/frappe/compare/v12.0.3...v12.0.4nvdPatchThird Party Advisory
github.com/frappe/frappe/pull/8044nvdPatchThird Party Advisory
github.com/frappe/frappe/pull/8045nvdPatchThird Party Advisory
github.com/frappe/frappe/pull/8047nvdPatchThird Party Advisory
github.com/frappe/frappe/pull/8046nvdThird Party Advisory
github.com/frappe/frappe/releases/tag/v12.0.4nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.