high7.5
CVE-2025-30217
Frappe has possibility of SQL injection due to improper validations
Impact
### Impact SQL injection could be achieved via a specially crafted request, which could allow malicious person to gain access to sensitive information. ### Workarounds Upgrading is required, no other workaround is present.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | frappe | < 14.93.2 | 14.93.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Frappe | Frappe | before 14.93.2 from 15.0.0 before 15.55.0 |