Vulnerabilities > CVE-2022-23056 - Unspecified vulnerability in Frappe Erpnext

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

frappe

NVD

Published: 2022-06-22

Updated: 2024-11-21

Summary

In ERPNext, versions v13.0.0-beta.13 through v13.30.0 are vulnerable to Stored XSS at the Patient History page which allows a low privilege user to conduct an account takeover attack.

Vulnerable Configurations

Part	Description	Count
Application	Frappe Frappe Erpnext 13.0.1 Frappe Erpnext 13.0.2 Frappe Erpnext 13.1.0 Frappe Erpnext 13.1.1 Frappe Erpnext 13.2.0 Frappe Erpnext 13.2.1 Frappe Erpnext 13.3.0 Frappe Erpnext 13.3.1 Frappe Erpnext 13.4.0 Frappe Erpnext 13.4.1 Frappe Erpnext 13.5.0 Frappe Erpnext 13.5.1 Frappe Erpnext 13.5.2 Frappe Erpnext 13.6.0 Frappe Erpnext 13.7.0 Frappe Erpnext 13.7.1 Frappe Erpnext 13.8.0 Frappe Erpnext 13.9.0 Frappe Erpnext 13.9.1 Frappe Erpnext 13.9.2 Frappe Erpnext 13.10.0 Frappe Erpnext 13.10.1 Frappe Erpnext 13.10.2 Frappe Erpnext 13.11.0 Frappe Erpnext 13.11.1 Frappe Erpnext 13.12.0 Frappe Erpnext 13.12.1 Frappe Erpnext 13.13.0 Frappe Erpnext 13.14.0 Frappe Erpnext 13.14.1 Frappe Erpnext 13.15.0 Frappe Erpnext 13.15.1 Frappe Erpnext 13.15.2 Frappe Erpnext 13.16.0 Frappe Erpnext 13.16.1 Frappe Erpnext 13.17.0 Frappe Erpnext 13.18.0 Frappe Erpnext 13.19.0 Frappe Erpnext 13.20.0 Frappe Erpnext 13.20.1 Frappe Erpnext 13.21.0 Frappe Erpnext 13.21.1 Frappe Erpnext 13.22.0 Frappe Erpnext 13.22.1 Frappe Erpnext 13.23.0 Frappe Erpnext 13.23.1 Frappe Erpnext 13.23.2 Frappe Erpnext 13.23.3 Frappe Erpnext 13.24.0 Frappe Erpnext 13.25.0 Frappe Erpnext 13.25.1 Frappe Erpnext 13.25.2 Frappe Erpnext 13.26.0 Frappe Erpnext 13.27.0 Frappe Erpnext 13.27.1 Frappe Erpnext 13.28.0 Frappe Erpnext 13.29.0 Frappe Erpnext 13.29.1 Frappe Erpnext 13.29.2 Frappe Erpnext 13.0.0	61

Summary

Vulnerable Configurations

References