CVE-2025-55731 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Frappe is a full-stack web application framework. A carefully crafted request could extract data that the user would normally not have access to, via SQL inject…
Medium CVSS: 6.3

CVE-2025-55731

Frappe is a full-stack web application framework. A carefully crafted request could extract data that the user would normally not have access to, via SQL injection. This vulnerability is fixed in 15.74.2 and 14.96.15.
Vendor
Frappe
Product
Frappe
CWE
CWE-89
Yayın Tarihi
2025-08-20 16:15:42
Güncelleme
2025-08-22 20:53:21
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-89 Frappe MEDIUM Frappe 2025

Referanslar

https://github.com/frappe/frappe/commit/93ee30c638bf7a7e33e2937a0adccac14c38b410 https://github.com/frappe/frappe/commit/c2b01e3eb6f50e9bd05df0440f5cbf5dfbc1badd https://github.com/frappe/frappe/security/advisories/GHSA-5p8f-568f-vfq2