CVE-2025-71431
5.3 MEDIUMpublic exploit availablePublished 2026-10-12 · Updated 2026-10-15
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Frappe before 14.99.2 and 15.x before 15.86.0 contains an LDAP injection vulnerability because certain endpoints do not sanitize user-supplied parameters before using them in LDAP queries. Attackers can supply crafted LDAP filter syntax through these parameters to alter the resulting directory queries.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-90
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-101145
- MEDIUMCVE-2026-10759
- HIGHCVE-2026-109357PoC
- LOWCVE-2026-110256PoC
- UNSCOREDCVE-2026-49469PoC
- UNSCOREDCVE-2026-67223PoC
- HIGHCVE-2026-89071
- HIGHCVE-2026-90979
Related by shared AI tags and CWE weakness class. Browse the full archive.