Beveiligingsadvies

CVE-2025-68929

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-29 15:10:59

Laatst bijgewerkt 2025-12-29 16:13:17

Toegewezen door GitHub_M

CVSS-score 9.1

Status PUBLISHED

Beschrijving

Frappe is a full-stack web application framework. Prior to versions 14.99.6 and 15.88.1, an authenticated user with specific permissions could be tricked into accessing a specially crafted link. This could lead to a malicious template being executed on the server, resulting in remote code execution. Versions 14.99.6 and 15.88.1 fix the issue. No known workarounds are available.

← Alle CVE's bekijken Bekijk op cve.org ↗