GHSA-qrv3-jc3h-f3m6High

Frappe vulnerable to information disclosure leading to account takeover

Published
March 25, 2025
Last Modified
March 30, 2025

🔗 CVE IDs covered (1)

CVE-2025-30214 →

📋 Description

Impact

Making crafted requests could lead to information disclosure that could further lead to account takeover.

Workarounds

There's no workaround to fix this without upgrading.

Credits

Thanks to Thanh of Calif.io for reporting the issue

🎯 Affected products2

  • pip/frappe:< 14.89.0
  • pip/frappe:>= 15.0.0, < 15.51.0

🔗 References (3)