Is CVE-2023-54410 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2023-54410 being exploited in the wild.

How severe is CVE-2023-54410?

Medium severity, with a CVSS score of 4.3, published 12 October 2026.

Is there a fix for CVE-2023-54410?

Yes: fixed in 13.22.0. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2023-54410 attacked?

It is attacked over the network.

Am I affected by CVE-2023-54410?

Check whether you run Frappe at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2023-54410: Frappe improper authorization in document rename

CVE-2023-54410 · Severity: medium · CVSS 4.3 · Published 2026-10-12

Frappe is a web application framework used to build enterprise resource planning and business management systems. An authenticated user can rename documents they do not have permission to modify, allowing unauthorized alteration of business records without proper access controls.

Technologies: Frappe. Vendors: Frappe.

Quick answers

Is CVE-2023-54410 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2023-54410 being exploited in the wild.
How severe is CVE-2023-54410?: Medium severity, with a CVSS score of 4.3, published 12 October 2026.
Which products and versions are affected?: Frappe before 13.22.0.
Is there a fix for CVE-2023-54410?: Yes: fixed in 13.22.0. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2023-54410 attacked?: It is attacked over the network.
Am I affected by CVE-2023-54410?: Check whether you run Frappe at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: 13.22.0

Technical details

Frappe before 13.22.0 fails to check permissions when processing document rename requests, allowing authenticated users to invoke rename functionality on documents they lack modification rights. The vulnerability requires prior authentication and network access. An attacker gains the ability to alter document identifiers, potentially disrupting data integrity and workflow.

Affected products

Frappe Frappe before 13.22.0

Timeline

2023-08-28: disclosed
2026-10-12: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.