Frappe Framework 12 and 13 does not properly validate the HTTP method for the frappe.client API.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Frappe | Frappe | 12.0.0 (including) | 12.12.0 (including) |
| Frappe | Frappe | 13.0.0-beta1 (including) | 13.0.0-beta1 (including) |
| Frappe | Frappe | 13.0.0-beta2 (including) | 13.0.0-beta2 (including) |
| Frappe | Frappe | 13.0.0-beta3 (including) | 13.0.0-beta3 (including) |
| Frappe | Frappe | 13.0.0-beta4 (including) | 13.0.0-beta4 (including) |
| Frappe | Frappe | 13.0.0-beta5 (including) | 13.0.0-beta5 (including) |
| Frappe | Frappe | 13.0.0-beta6 (including) | 13.0.0-beta6 (including) |
| Frappe | Frappe | 13.0.0-beta7 (including) | 13.0.0-beta7 (including) |
| Frappe | Frappe | 13.0.0-beta8 (including) | 13.0.0-beta8 (including) |