CVE-2023-54407 — Frappe 14.x before 14.45.0 Information Disclosure via Error Log Tracebacks
Frappe 14.x before 14.45.0 contains an information disclosure vulnerability that allows users with error log access to view secrets stored in local variables captured in traceba…
Published: 2026-10-12 · CVSS: 6.9 · CVSS 4.0
Frappe 14.x before 14.45.0 contains an information disclosure vulnerability that allows users with error log access to view secrets stored in local variables captured in tracebacks. Attackers who can read error logs can extract plaintext secrets such as credentials or keys exposed in traceback local variables.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7