CVE-2023-54412 in Frappeinformazioni

Riassunto

di MITRE • 13/10/2026

Frappe before 13.46.3 and 14.x before 14.21.1 contains an improper access control vulnerability in Email Template permissions that allows any authenticated non-guest user to create and edit any Email Template. Attackers with low-privileged accounts, including self-registered users when signup is enabled, can modify Email Templates used by the application.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsabile

VulnCheck

Prenotare

12/10/2026

Divulgazione

13/10/2026

Moderazione

accettato

EPSS

0.00000

KEV

no

Attività

molto basso

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2023-54412
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2023-54412
CVE Detailshttps://www.cvedetails.com/cve/CVE-2023-54412/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!