CVE-2025-55732
20.08.2025, 16:15
Frappe is a full-stack web application framework. Prior to 15.74.2 and 14.96.15, an attacker could implement SQL injection through specially crafted requests, allowing malicious people to access sensitive information. This vulnerability is a bypass of the official patch released for CVE-2025-52895. This vulnerability is fixed in 15.74.2 and 14.96.15.
| Vendor | Product | Version |
|---|---|---|
| frappe | frappe | 𝑥 < 14.96.15 |
| frappe | frappe | 15.0.0 ≤ 𝑥 < 15.74.2 |
𝑥
= Vulnerable software versions