Логотип exploitDog
bind:CVE-2025-30213
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-30213

Количество 2

Количество 2

nvd логотип

CVE-2025-30213

11 месяцев назад

Frappe is a full-stack web application framework. Prior to versions 14.91.0 and 15.52.0, a system user was able to create certain documents in a specific way that could lead to remote code execution. Versions 14.9.1 and 15.52.0 contain a patch for the vulnerability. There's no workaround; an upgrade is required.

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-v342-4xr9-x3q3

11 месяцев назад

Frappe has Possibility of Remote Code Execution due to improper validation

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-30213

Frappe is a full-stack web application framework. Prior to versions 14.91.0 and 15.52.0, a system user was able to create certain documents in a specific way that could lead to remote code execution. Versions 14.9.1 and 15.52.0 contain a patch for the vulnerability. There's no workaround; an upgrade is required.

CVSS3: 8.8
1%
Низкий
11 месяцев назад
github логотип
GHSA-v342-4xr9-x3q3

Frappe has Possibility of Remote Code Execution due to improper validation

1%
Низкий
11 месяцев назад

Уязвимостей на страницу