frappe
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 178 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 4, 2017 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Frappe: Access control bypass via REST API dot-notation fields on linked doctypes
Frappe: User Enumeration via PDDR
Frappe: Improper Authorization in OAuth2 Consent Endpoint
Frappe: Mass assignment via set_value
Frappe: Unauthenticated Workflow approval via confirm_action
Frappe: Missing authorization in toggle_like and mark_as_seen
ERPNext: Server-Side Template Injection leading to Remote Code Execution
Frappe: Unrestricted access to a Document Follow API
Frappe: Field-level permission bypass via Document Follow
Frappe: Stored XSS in Column Headers via Data Import
Monitor frappe in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.