CVE-2025-68929 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Frappe is a full-stack web application framework. Prior to versions 14.99.6 and 15.88.1, an authenticated user with specific permissions could be tricked into a…
Critical CVSS: 9.0

CVE-2025-68929

Frappe is a full-stack web application framework. Prior to versions 14.99.6 and 15.88.1, an authenticated user with specific permissions could be tricked into accessing a specially crafted link. This could lead to a malicious template being executed on the server, resulting in remote code execution. Versions 14.99.6 and 15.88.1 fix the issue. No known workarounds are available.
Vendor
Frappe
Product
Frappe
CWE
CWE-1336
Yayın Tarihi
2025-12-29 15:16:02
Güncelleme
2025-12-31 20:02:50
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-1336 Frappe CRITICAL Frappe 2025

Referanslar

https://github.com/frappe/frappe/releases/tag/v14.99.6 https://github.com/frappe/frappe/releases/tag/v15.88.1 https://github.com/frappe/frappe/security/advisories/GHSA-qq98-vfv9-xmxh