Junglewise Threat Intelligence

CVE-2025-30214: PYSEC-2026-1392 - Frappe vulnerable to information disclosure leading to account takeover

CVE-2025-30214 · Severity: medium · CVSS 4 · Published 2026-07-07

Technologies: frappe (PyPI). Vendors: PyPI.

Executive brief

Frappe vulnerable to information disclosure leading to account takeover

Affected products

PyPI frappe

Related threats

PYSEC-2026-1391 - Frappe has possibility of SQL injection due to improper validations
PYSEC-2026-1393 - Frappe has Possibility of Remote Code Execution due to improper validation
PYSEC-2026-1390 - Frappe has possibility of SQL injection due to improper validations