Frappe is a full-stack web application framework. Prior to 16.20.0 and 15.112.0, a field-level permissions bypass exposes restricted DocType fields. This issue is fixed in versions 16.23.0 and 15.112…
提示
摘要
Frappe is a full-stack web application framework. Prior to 16.20.0 and 15.112.0, a field-level permissions bypass exposes restricted DocType fields. This issue is fixed in versions 16.23.0 and 15.112.0.
中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。
深度研判 · 自动通道
该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。
数据来源
- NVD DATABASE
原始链接
- https://github.com/frappe/frappe/commit/45dfd1432eb65581f90b8b0589e456e77a574fe4
- https://github.com/frappe/frappe/commit/d6a214db952cf7010020889bbc00073cce88a0c9
- https://github.com/frappe/frappe/security/advisories/GHSA-7vpf-q96h-59x4
时间线
- nvd_ingest NVD