{"vulnerability": "CVE-2025-71431", "sightings": [{"uuid": "559cad45-8486-4f30-a9f0-e30a14c0855c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71431", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117430364969155303", "content": "CVE-2025-71431 Frappe before 15.86.0 LDAP Injection via Unsanitized Endpoint Parameters Frappe before 14.99.2 and 15.x before 15.86.0 contains an LDAP injection vulnerability because certain endpoints do not sanitize user-supplied parameters before using them in LDAP queries. Attackers can supply crafted LDAP filter syntax through these parameters to alter the resulting directory queries.\nhttps://www.cve.org/CVERecord?id=CVE-2025-71431https://github.com/frappe/frappe/security/advisories/GHSA-qrq5-v93p-8xhwhttps://www.vulncheck.com/advisories/frappe-before-15.86.0-ldap-injection-via-unsanitized-endpoint-parameters#frappe#CVE_2025_71431#bot", "creation_timestamp": "2026-10-12T22:46:09.200161Z"}]}