CVE-2025-52048 – Frappe SQL Injection Vulnerability

CVE ID : CVE-2025-52048

Published : Sept. 15, 2025, 4:15 p.m. | 38 minutes ago

Description : In Frappe 15.x.x before 15.72.0 and 14.x.x before 14.96.10, in the function add_tag() at `frappe/desk/doctype/tag/tag.py` is vulnerable to SQL Injection, which allows an attacker to extract information from databases by injecting a SQL query into the `dt` parameter.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…