- Katılım
- 12 Şub 2024
- Mesajlar
- 778
Genel Bilgi
Frappe Framework'de güvenlik zafiyetleri tespit edilmiştir.
Etki
Mevcut güvenlik açıklıkları nedeniyle siber saldırganların zafiyeti kullanarak saldırılarını gerçekleştirmeleri ihtimal dâhilindedir. İlgili CVE kodları şöyledir.
CVE-2024-58390, CVE-2026-109675, CVE-2026-109674, CVE-2026-109673, CVE-2026-109672, CVE-2026-109671, CVE-2026-109670, CVE-2026-109669, CVE-2026-109668, CVE-2026-109667, CVE-2026-109666, CVE-2026-109665, CVE-2026-109664, CVE-2026-109663, CVE-2026-109662, CVE-2026-109661, CVE-2026-109660, CVE-2026-109659, CVE-2026-109658, CVE-2026-109657, CVE-2026-109656, CVE-2026-109655, CVE-2026-109654, CVE-2026-109653, CVE-2026-109652, CVE-2026-109651, CVE-2026-109650, CVE-2026-109649, CVE-2026-109648, CVE-2026-109647, CVE-2026-109646, CVE-2026-109645, CVE-2026-109644, CVE-2026-109643, CVE-2026-109642, CVE-2026-109641, CVE-2026-109640, CVE-2026-109639, CVE-2026-109638, CVE-2026-109637, CVE-2026-109636, CVE-2026-109635, CVE-2026-109634, CVE-2026-109633, CVE-2026-109632, CVE-2026-109631, CVE-2026-109630, CVE-2026-109629, CVE-2026-109628, CVE-2026-109627, CVE-2026-109626, CVE-2026-109625, CVE-2026-109624, CVE-2026-109623, CVE-2026-109622, CVE-2026-109621, CVE-2026-109617, CVE-2026-109616, CVE-2026-109615, CVE-2026-109614, CVE-2026-109613, CVE-2026-109612, CVE-2026-109611, CVE-2026-109610, CVE-2026-109609, CVE-2026-109608, CVE-2026-109604, CVE-2026-109603, CVE-2025-26240, CVE-2026-109602, CVE-2026-109601, CVE-2026-109600, CVE-2026-109599, CVE-2026-109598, CVE-2025-71432, CVE-2025-71431, CVE-2025-71430, CVE-2024-58391, CVE-2023-54412, CVE-2023-54411, CVE-2023-54410, CVE-2023-54409, CVE-2023-54408, CVE-2023-54407 ve CVE-2023-54406
Çözüm
Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili güvenlik bültenini incelemelerini ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.
Kaynaklar
https://github.com/frappe/frappe/security/advisories
https://github.com/frappe/erpnext/security/advisories
https://github.com/frappe/suite/security/advisories
