VYPR
← All advisories
Medium severityNVD Advisory· Published Jun 12, 2026· Updated Jun 12, 2026

CVE-2026-44208

CVE-2026-44208

Description

Frappe is a full-stack web application framework. Prior to versions 15.107.0 and 16.17.0, lack of validations in the "submit_discussion()" endpoint allows for unauthorized access to resources. This issue has been patched in versions 15.107.0 and 16.17.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Frappe/Frappeinferred2 versions
    <15.107.0 || <16.17.0+ 1 more
    • (no CPE)range: <15.107.0 || <16.17.0
    • (no CPE)range: <15.107.0, <16.17.0

Patches

Vulnerability mechanics

References

1

News mentions

1