high8.8
CVE-2025-30213
Frappe has Possibility of Remote Code Execution due to improper validation
Impact
### Impact A system user was able to create certain documents in a specific way that could lead to RCE. ### Workarounds There's no workaround, an upgrade is required. ### Credits Thanks to Thanh of Calif.io for reporting the issue
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | frappe | < 14.91.0 | 14.91.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Frappe | Frappe | before 14.91.0 from 15.0.0 before 15.52.0 |