CVE-2026-47422 — Frappe: Unrestricted API access to save_report
Frappe is a full-stack web application framework. Prior to 15.107.5 and 16.18.2, an endpoint in reportview lacked appropriate permission checks and that has since been fixed. Th…
Published: 2026-07-10 · CVSS: 5.3 · CVSS 4.0
Frappe is a full-stack web application framework. Prior to 15.107.5 and 16.18.2, an endpoint in reportview lacked appropriate permission checks and that has since been fixed. This vulnerability is fixed in 15.107.5 and 16.18.2.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7