high8.0
CVE-2025-30214
Frappe vulnerable to information disclosure leading to account takeover
Impact
### Impact Making crafted requests could lead to information disclosure that could further lead to account takeover. ### Workarounds There's no workaround to fix this without upgrading. ### Credits Thanks to Thanh of Calif.io for reporting the issue
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | frappe | < 14.89.0 | 14.89.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Frappe | Frappe | before 14.89.0 from 15.0.0 before 15.51.0 |