CVE-2025-28062 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A Cross-Site Request Forgery (CSRF) vulnerability was discovered in ERPNEXT 14.82.1 and 14.74.3. The vulnerability allows an attacker to perform unauthorized ac…
High CVSS: 8.1

CVE-2025-28062

A Cross-Site Request Forgery (CSRF) vulnerability was discovered in ERPNEXT 14.82.1 and 14.74.3. The vulnerability allows an attacker to perform unauthorized actions such as user deletion, password resets, and privilege escalation due to missing CSRF protections.
Vendor
Frappe
Product
Erpnext
CWE
CWE-352
Yayın Tarihi
2025-05-05 16:15:51
Güncelleme
2025-06-17 14:13:04
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-352 Erpnext HIGH Frappe 2025

Referanslar

https://github.com/Thvt0ne/CVE-2025-28062 https://github.com/frappe/erpnext