CyberRota Analysis
AI-GeneratedFrappe CRM versions prior to 1.73.0 are vulnerable to an authentication bypass due to improper handling of logged invitation keys in the crm/api endpoint. This flaw allows unauthorized access to sensitive functionalities, potentially compromising user data and system integrity. Organizations using affected versions should prioritize upgrading to 1.73.0 to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Frappe CRM is an open-source customer relationship management tool. Prior to version 1.73.0, there is an authentication bypass vulnerability via logged invitation keys in crm/api. This issue has been patched in version 1.73.0.