CVE-2025-11461
Frappe CRM 1.53.1 — Multiple SQL Injections in Dashboard Controller
概要
Frappe CRM 1.53.1 — Multiple SQL Injections in Dashboard Controller
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Multiple SQL Injections in Frappe CRM Dashboard Controller due to unsafe concatenation of user-controlled parameters into dynamic SQL statements.
This issue affects Frappe CRM: 1.53.1.
参照URL
- advisory fluidattacks.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com