CVE-2025-11461 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Multiple SQL Injections in Frappe CRM Dashboard Controller due to unsafe concatenation of user-controlled parameters into dynamic SQL statements. This issue aff…
High CVSS: 7.1

CVE-2025-11461

Multiple SQL Injections in Frappe CRM Dashboard Controller due to unsafe concatenation of user-controlled parameters into dynamic SQL statements.
This issue affects Frappe CRM: 1.53.1.
Vendor
Frappe
Product
Frappe Crm
CWE
CWE-89
Yayın Tarihi
2025-11-26 18:15:46
Güncelleme
2025-12-19 16:32:47
Source Identifier
help@fluidattacks.com
KEV Date Added
-

Kategoriler

CWE-89 Frappe Crm HIGH Frappe 2025

Referanslar

https://fluidattacks.com/advisories/oz https://github.com/frappe/crm https://github.com/frappe/crm/pull/1339 https://fluidattacks.com/advisories/oz https://github.com/frappe/crm