CVE-2025-66205 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Frappe is a full-stack web application framework. Prior to 15.86.0 and 14.99.2, a certain endpoint was vulnerable to error-based SQL injection due to lack of va…
High CVSS: 7.1

CVE-2025-66205

Frappe is a full-stack web application framework. Prior to 15.86.0 and 14.99.2, a certain endpoint was vulnerable to error-based SQL injection due to lack of validation of parameters. Some information like version could be retrieved. This vulnerability is fixed in 15.86.0 and 14.99.2.
Vendor
Frappe
Product
Frappe
CWE
CWE-89
Yayın Tarihi
2025-12-01 21:15:52
Güncelleme
2025-12-04 18:49:12
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-89 Frappe HIGH Frappe 2025

Referanslar

https://github.com/frappe/frappe/commit/984c641bff9539b6126a01146096f133db6a955b https://github.com/frappe/frappe/security/advisories/GHSA-mp93-8vxr-hqq9