Cpe:2.3:a:frappe:frappe_framework:*:*:*:*:*:*:*:*

Frappe versions 14.x and 15.x contain a privilege management vulnerability allowing authenticated Website Users to escalate to System Manager privileges via document action manipulation.