frappe
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 289 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 4, 2017 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Frappe HRMS before 15.61.0 Permission Bypass via Expense Claim Advances API
Frappe Framework before 15.111.0 and 16.x before 16.21.0 Server-Side Template Injection via Message Fields
Frappe CRM before 1.89.1 Missing Authorization via Phone Lookup API
Frappe Builder before 1.36.1 SSRF Guard Bypass via HTTP Redirect
Frappe Builder before 1.36.1 SSRF via convert_to_webp
Frappe Builder before 1.36.1 SSRF via convert_to_webp
Frappe Builder 1.33.0 before 1.36.0 Missing Authorization via improve_prompt
Frappe before 16.33.0 Blind SQL Injection via get_events
Frappe Helpdesk before 1.26.0 Authorization Bypass via raised_by in Ticket Creation
Frappe CRM before 1.74.0 Missing Authorization via add_note_to_call_log
Monitor frappe in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.