CVE-2023-51769
MEDIUMCVSS 6.1/10EPSS 0.19%
Last modified
CVE-2023-51769 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exception pages.. EPSS estimates a 0.19% chance of exploitation in the next 30 days.
Description
Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exception pages.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Frappe | Frappe | < 14.49.0 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2023-51769?
Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exception pages.
How severe is CVE-2023-51769?
CVE-2023-51769 has a CVSS score of 6.1/10 (MEDIUM severity). The EPSS model estimates a 0.19% probability of exploitation in the next 30 days.
How do I fix CVE-2023-51769?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-51761In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products…8.1
- CVE-2023-51763csv_builder.rb in ActiveAdmin (aka Active Admin) before 3.2.…9.8
- CVE-2023-51764Postfix through 3.8.5 allows SMTP smuggling unless configure…5.3
- CVE-2023-51765sendmail through 8.17.2 allows SMTP smuggling in certain con…5.3
- CVE-2023-51766Exim before 4.97.1 allows SMTP smuggling in certain PIPELINI…5.3
- CVE-2023-51767OpenSSH through 10.0, when common types of DRAM are used, mi…7
- CVE-2023-5177The Vrm 360 3D Model Viewer WordPress plugin through 1.2.1 e…5.3
- CVE-2023-51770Arbitrary File Read Vulnerability in Apache Dolphinscheduler…7.5
- CVE-2023-51771In MicroHttpServer (aka Micro HTTP Server) through a8ab029, …9.8
- CVE-2023-51772One Identity Password Manager before 5.13.1 allows Kiosk Esc…8.8
- CVE-2023-51773BACnet Stack before 1.3.2 has a decode function APDU buffer …9.1
- CVE-2023-51774The json-jwt (aka JSON::JWT) gem 1.16.3 for Ruby sometimes a…8.4
Are you affected by CVE-2023-51769?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST