CyberRota Analysis
AI-GeneratedFrappe's web application framework contains a vulnerability in the reportview endpoint that lacks proper permission checks, potentially allowing unauthorized access to sensitive data. Organizations using versions prior to 15.107.5 and 16.18.2 should prioritize updating to these versions to mitigate the risk of data exposure. This issue is particularly relevant for developers and system administrators managing Frappe applications.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Frappe is a full-stack web application framework. Prior to 15.107.5 and 16.18.2, an endpoint in reportview lacked appropriate permission checks and that has since been fixed. This vulnerability is fixed in 15.107.5 and 16.18.2.