Security Advisory

CVE-2025-55731

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-08-20 15:22:16
Last updated 2025-08-20 15:47:04
Assigner GitHub_M
State PUBLISHED

Description

Frappe is a full-stack web application framework. A carefully crafted request could extract data that the user would normally not have access to, via SQL injection. This vulnerability is fixed in 15.74.2 and 14.96.15.