Vulnerabilidades en frappe
265 resultadosCVE-2023-54408MEDIUMFrappe before 14.31.0 HTML Injection via Weak EscapingEPSS 0.2%CVE-2026-109642MEDIUMFrappe ERPNext before 15.110.0 Missing Authorization in Certain EndpointsEPSS 0.2%CVE-2026-109630MEDIUMFrappe ERPNext before 15.121.0 Missing Authorization in EndpointsEPSS 0.2%CVE-2026-101006MEDIUMFrappe HR Permission Validation __init__.py get_attendance_requests authorizationEPSS 0.2%CVE-2026-45081MEDIUMFrappe HR: Permission Bypass in HRMS Leave Details APIEPSS 0.2%CVE-2026-3673MEDIUMFrappe Framework 16.10.0 - Stored DOM XSS in Tag Pill RendererEPSS 0.2%CVE-2026-114664HIGHFrappe before 16.33.0 Blind SQL Injection via get_eventsEPSS 0.2%CVE-2026-55242HIGHERPNext: Server-Side Template Injection (SSTI) in Batch autonaming via Stock Settings.naming_series_prefixEPSS 0.2%CVE-2026-25956MEDIUMFrappe Affected by XSS and Open Redirect in Sign UpEPSS 0.2%CVE-2026-3837MEDIUMFrappe Framework 16.10.0 - Stored DOM XSS in Multiple Field FormattersEPSS 0.2%CVE-2026-109635MEDIUMFrappe ERPNext before 15.105.0 Missing Authorization in Document Creation EndpointsEPSS 0.2%CVE-2026-28436LOWFrappe: Stored XSS in avatar_macro.htmlEPSS 0.2%CVE-2023-54410MEDIUMFrappe before 13.22.0 Improper Authorization via Document RenameEPSS 0.2%CVE-2026-109664MEDIUMFrappe ERPNext before 15.112.0 Missing Authorization Allows Arbitrary Record ModificationEPSS 0.2%CVE-2026-109611MEDIUMFrappe ERPNext before 15.121.0 Missing Authorization in Certain EndpointsEPSS 0.2%CVE-2026-109668MEDIUMFrappe ERPNext before 15.110.0 Missing Authorization in Party Record EndpointsEPSS 0.2%CVE-2026-109622MEDIUMFrappe ERPNext before 15.121.0 Unauthorized Document Modification via Missing AuthorizationEPSS 0.2%CVE-2026-109598MEDIUMFrappe before 16.33.0 Broken Authorization via send_sms EndpointEPSS 0.2%CVE-2026-109599MEDIUMFrappe before 15.113.3 Missing Authorization Allows Unauthorized Record ModificationEPSS 0.2%CVE-2026-109665MEDIUMFrappe ERPNext before 15.108.0 Missing Authorization Allows Master Record DeactivationEPSS 0.2%