CVE-2024-49751

Sažetak

Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS). Prior to commit 5d118a902872d7941f099ad1fb918e2421e79ccd, a user could inject HTML through SaaS signup inputs. The user who injected the unsafe HTML code would only affect themselves and would not affect other users. Commit 5d118a902872d7941f099ad1fb918e2421e79ccd patches this bug.

Reference

https://github.com/frappe/press/commit/5d118a902872d7941f099ad1fb918e2421e79ccd
https://github.com/frappe/press/security/advisories/GHSA-rf69-h96f-rf2j

CVSS

Base:	0.0
Impact:	None
Exploitability:	None

Pristup

Vektor	Složenost	Autentikacija
None	None	None

Impact

Povjerljivost	Cjelovitost	Dostupnost
None	None	None

CVSS vektor

None

Zadnje važnije ažuriranje

25-10-2024 - 12:56

Objavljeno

23-10-2024 - 16:15