CVE-2025-52898 Frappe account takeover via password reset token leakage

Frappe is a full-stack web application framework. Prior to versions 14.94.3 and 15.58.0, a carefully crafted request could lead to a malicious actor getting access to a user's password reset token. This can only be exploited on self hosted instances configured in a certain way. Frappe Cloud users...

CGA-W825-836W-2W9G

Bulletin has no description...

CGA-6879-9559-49M6

Bulletin has no description...

CGA-69MJ-GMFQ-G3G6

Bulletin has no description...

MINI-FHP2-389Q-2CXM

Bulletin has no description...

CGA-G9MJ-RQPV-9273

Bulletin has no description...

CGA-MJG9-H2JR-FQRQ

Bulletin has no description...

CGA-4X2P-QMX3-VG3X

Bulletin has no description...

MINI-Q8R8-8F53-WP2M

Bulletin has no description...

CGA-HCJW-8PMQ-QM9R

Bulletin has no description...

CGA-GVWP-RQH2-V3H9

Bulletin has no description...

MINI-CR3F-F644-XMQR

Bulletin has no description...

PUB-A-394726304

Bulletin has no description...

MINI-WHCC-R7X9-FGPJ

Bulletin has no description...

MINI-JM6Q-7PJ8-XGG5

Bulletin has no description...

MINI-GQVP-WJXW-8RFM

Bulletin has no description...

MINI-GC5G-2MGR-FGH5

Bulletin has no description...

MINI-FW74-3JQR-PHJG

Bulletin has no description...

MINI-XC75-H4VH-JVF2

Bulletin has no description...

MINI-5J9M-85V6-GC24

Bulletin has no description...