Approved changes feed: RSS · Atom

cpe:2.3:a:frappe:frappe_crm:1.53.1:*:linux:*:*:*:*:*

part: a version: 1.53.1 update: *

VendorFrappe (a51f8b94-1fb6-5e30-97d7-fbeb544c71ba)
ProductFrappe Crm (6d42f77c-c01b-5fe6-bcdd-d6e0326c1b95)
Editionlinux
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-11461 vulnerable 2026-06-03 14:58:36.092597 Frappe CRM 1.53.1 — Multiple SQL Injections in Dashboard Controller
Multiple SQL Injections in Frappe CRM Dashboard Controller due to unsafe concatenation of user-controlled parameters into dynamic SQL statements. This issue affects Frappe CRM: 1.53.1.
Published: 2025-11-26T17:45:05.113Z
Updated: 2025-12-03T16:16:06.493Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.