Approved changes feed: RSS · Atom

cpe:2.3:a:frappe:frappe:11.0.0:-:*:*:*:*:*:*

part: a version: 11.0.0 update: -

VendorFrappe (a51f8b94-1fb6-5e30-97d7-fbeb544c71ba)
ProductFrappe (8a44176d-533c-53c6-aaf4-17dd3ac01c2a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/frappe/frappe purl2cpe 2026-06-01 10:17:00.331599

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-20529 vulnerable 2026-06-03 14:40:16.804282 Details available
In core/doctype/prepared_report/prepared_report.py in Frappe 11 and 12, data files generated with Prepared Report were being stored as public files (no authentication is required to access; having a link is sufficient) instead of private files.
Published: 2020-03-18T17:30:31.000Z
Updated: 2024-08-05T02:46:10.323Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.