VYPR
← All advisories
High severity8.1NVD Advisory· Published Sep 6, 2025· Updated Jun 17, 2026

CVE-2025-58439

CVE-2025-58439

Description

ERP is a free and open source Enterprise Resource Planning tool. In versions below 14.89.2 and 15.0.0 through 15.75.1, lack of validation of parameters left certain endpoints vulnerable to error-based SQL Injection. Some information like version could be retrieved. This issue is fixed in versions 14.89.2 and 15.76.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Frappe/Erpnext3 versions
    cpe:2.3:a:frappe:erpnext:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:frappe:erpnext:*:*:*:*:*:*:*:*range: <14.89.2
    • (no CPE)range: <14.89.2, 15.0.0-15.75.1
    • (no CPE)range: >=15.0.0, < 15.76.0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.