CVE-2019-15700

public/js/frappe/form/footer/timeline.js in Frappe Framework 12 through 12.0.8 does not escape HTML in the timeline and thus is affected by crafted "changed…

published August 27, 2019

CVSS
—
EPSS
1%
Percentile
58.6
In the wild
Unconfirmed
What it is

public/js/frappe/form/footer/timeline.js in Frappe Framework 12 through 12.0.8 does not escape HTML in the timeline and thus is affected by crafted "changed value of" text.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00875 · 58.6th percentile
Published
2019-08-27T17:17Z
EPSS history
Timeline
  • 27 AUG 17:17Z
    public/js/frappe/form/footer/timeline.js in Frappe Framework 12 through 12.0.8 does not escape HTML in the timeline and thus is affected by crafted "changed…
    cvelistv5