Beveiligingsadvies

CVE-2025-66205

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-01 20:26:14

Laatst bijgewerkt 2025-12-01 21:19:52

Toegewezen door GitHub_M

CVSS-score 7.1

Status PUBLISHED

Beschrijving

Frappe is a full-stack web application framework. Prior to 15.86.0 and 14.99.2, a certain endpoint was vulnerable to error-based SQL injection due to lack of validation of parameters. Some information like version could be retrieved. This vulnerability is fixed in 15.86.0 and 14.99.2.

← Alle CVE's bekijken Bekijk op cve.org ↗