Skip to content
OpenAdvisories

Product · Frappe Technologies

suite

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-109675

    Frappe Suite before commit 2697564 Broken Access Control in Mail Mailbox and Quota APIs

    Frappe Suite before commit 2697564a9c46da6acc614743eaf9915fe5238f4f contains a broken access control vulnerability in the get_mailboxes and get_quota APIs that allows authenticated mail users to access other users' data. Attackers can supply another user's JM…

    Frappe Technologies suite