CVE-2025-11461
Frappe CRM 1.53.1 — Multiple SQL Injections in Dashboard Controller
Résumé
Frappe CRM 1.53.1 — Multiple SQL Injections in Dashboard Controller
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Multiple SQL Injections in Frappe CRM Dashboard Controller due to unsafe concatenation of user-controlled parameters into dynamic SQL statements.
This issue affects Frappe CRM: 1.53.1.
Références
- advisory fluidattacks.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com