CVE-2025-55731 — Frappe has the possibility of Authenticated SQL Injection due to improper validations
Frappe is a full-stack web application framework. A carefully crafted request could extract data that the user would normally not have access to, via SQL injection. This vulnera…
Published: 2025-08-20 · CVSS: 6.3 · CVSS 4.0
Frappe is a full-stack web application framework. A carefully crafted request could extract data that the user would normally not have access to, via SQL injection. This vulnerability is fixed in 15.74.2 and 14.96.15.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7