← All advisories

High severity8.8NVD Advisory· Published Aug 12, 2019· Updated Jun 17, 2026

CVE-2019-14966

CVE-2019-14966

Description

An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. There exists an authenticated SQL injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Frappe/Frappe2 versions
cpe:2.3:a:frappe:frappe:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:frappe:frappe:*:*:*:*:*:*:*:*range: >=10.0.0,<=12.0.4
- (no CPE)range: <12.0.4
Frappe/Frappe Frameworkdescription

Patches

Vulnerability mechanics

References

6

github.com/frappe/frappe/compare/v12.0.3...v12.0.4nvdPatchThird Party Advisory
github.com/frappe/frappe/pull/8044nvdPatchThird Party Advisory
github.com/frappe/frappe/pull/8045nvdPatchThird Party Advisory
github.com/frappe/frappe/pull/8046nvdPatchThird Party Advisory
github.com/frappe/frappe/pull/8047nvdPatchThird Party Advisory
github.com/frappe/frappe/releases/tag/v12.0.4nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.