Approved changes feed: RSS · Atom

cpe:2.3:a:frappe:helpdesk:1.14.0:*:*:*:*:*:*:*

part: a version: 1.14.0 update: *

VendorFrappe (a51f8b94-1fb6-5e30-97d7-fbeb544c71ba)
ProductHelpdesk (751d8498-863e-5a14-9219-00de263a9713)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/frappe/helpdesk purl2cpe 2026-06-01 10:17:00.551479

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-10655 vulnerable 2026-06-08 07:02:27.273092 Frappe Helpdesk 1.14.0 — SQL Injection in dashboard get_dashboard_data
SQL Injection in Frappe HelpDesk in the dashboard get_dashboard_data due to unsafe concatenation of user-controlled parameters into dynamic SQL statements.This issue affects Frappe HelpDesk: 1.14.0.
Published: 2025-12-09T14:49:53.280Z
Updated: 2025-12-09T15:06:24.237Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.