Unrated severityNVD Advisory· Published Oct 2, 2025· Updated Oct 2, 2025
CVE-2025-56381
CVE-2025-56381
Description
ERPNEXT v15.67.0 was discovered to contain multiple SQL injection vulnerabilities in the /api/method/frappe.desk.reportview.get endpoint via the order_by and group_by parameters.
Affected products
1- ERPNEXT/ERPNEXTdescription
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
News mentions
0No linked articles in our index yet.