Crm (Frappe) - vulnerabilities (CVEs)

3 CVEs, 1 in the last 30 days, 1 known versions, newest CVE from 2026-10-11. Vendor: Frappe.

CVEs of Crm

• CVE-2026-108734 - CVSS 5.3 (medium), 2026-10-11: Frappe CRM 1.49.0 through 1.87.0 contains a missing authorization vulnerability in crm.api.doc.get_linked_docs_of_document that allows authenticated users to…
• CVE-2026-53761 - CVSS 8.2 (high), 2026-09-04: Frappe CRM is an open-source customer relationship management tool. Prior to version 1.73.0, there is an authentication bypass vulnerability via logged…
• CVE-2025-68928 - CVSS 5.4 (medium), 2025-12-29: Frappe CRM is an open-source customer relationship management tool. Prior to version 1.56.2, authenticated users could set crafted URLs in a website field,…