CVE-2025-66205 - Frappe has the possibility of SQL Injection due to improper validations

CVE ID : CVE-2025-66205 Published : Dec. 1, 2025, 9:15 p.m. | 39 minutes ago Description : Frappe is a full-stack web application framework. Prior to 15.86.0 and 14.99.2, a certain endpoint was vulnerable to error-based SQL injection due to lack of validation of parameters. Some information like version could be retrieved. This vulnerability is fixed in 15.86.0 and 14.99.2. Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor