CVE-2025-55732 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Frappe is a full-stack web application framework. Prior to 15.74.2 and 14.96.15, an attacker could implement SQL injection through specially crafted requests, a…
High CVSS: 8.7

CVE-2025-55732

Frappe is a full-stack web application framework. Prior to 15.74.2 and 14.96.15, an attacker could implement SQL injection through specially crafted requests, allowing malicious people to access sensitive information. This vulnerability is a bypass of the official patch released for CVE-2025-52895. This vulnerability is fixed in 15.74.2 and 14.96.15.
Vendor
Frappe
Product
Frappe
CWE
CWE-89
Yayın Tarihi
2025-08-20 16:15:43
Güncelleme
2025-08-22 20:52:02
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-89 Frappe HIGH Frappe 2025

Referanslar

https://github.com/frappe/frappe/commit/24dd2d9420a7c68ce09875cb18586d1bf071c857 https://github.com/frappe/frappe/commit/abe2cc25e333cd794405d12caec4da0279a54e6e https://github.com/frappe/frappe/security/advisories/GHSA-6rpr-2hjx-w9vp