VULNERABILITY INTELLIGENCE

CVE-2025-55731

CVSS score8.8 HIGH

EPSS probability0.38%

CISA KEVNot currently listed

Published2025-08-20

Last modified2026-06-17

Description

Frappe is a full-stack web application framework. A carefully crafted request could extract data that the user would normally not have access to, via SQL injection. This vulnerability is fixed in 15.74.2 and 14.96.15.