CVE-2025-56381 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

ERPNEXT v15.67.0 was discovered to contain multiple SQL injection vulnerabilities in the /api/method/frappe.desk.reportview.get endpoint via the order_by and gr…
Medium CVSS: 6.5

CVE-2025-56381

ERPNEXT v15.67.0 was discovered to contain multiple SQL injection vulnerabilities in the /api/method/frappe.desk.reportview.get endpoint via the order_by and group_by parameters.
Vendor
Frappe
Product
Erpnext
CWE
CWE-89
Yayın Tarihi
2025-10-02 14:15:45
Güncelleme
2025-10-03 16:18:36
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-89 Erpnext MEDIUM Frappe 2025

Referanslar

https://github.com/MoAlali/ https://github.com/MoAlali/CVE-2025-56381