CVE-2026-53761:详情

CVE-2026-53761

2026-09-04
18h17 +00:00
Authorization problems
A07-Identif. and Authent. Fail
2026-09-09
21h09 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

Frappe CRM is an open-source customer relationship management tool. Prior to version 1.73.0, there is an authentication bypass vulnerability via logged invitation keys in crm/api. This issue has been patched in version 1.73.0.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

参考资料