Frappe Framework (< 15.111.0, 16.x < 16.21.0)

Frappe contains a path traversal vulnerability in its file-upload handling that can allow authenticated attackers to achieve remote code execution.