Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-28062
8.1
HIGHCVSS v3
Published
May 5, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
A Cross-Site Request Forgery (CSRF) vulnerability was discovered in ERPNEXT 14.82.1 and 14.74.3. The vulnerability allows an attacker to perform unauthorized actions such as user deletion, password resets, and privilege escalation due to missing CSRF protections.
GitHub