· tr-26-1300
TR-26-1300 (Frappe Framework Güvenlik Zafiyeti)
Genel Bilgi
Frappe Framework'de güvenlik zafiyetleri tespit edilmiştir.
Etki
Mevcut güvenlik açıklıkları nedeniyle siber saldırganların zafiyeti kullanarak saldırılarını gerçekleştirmeleri ihtimal dâhilindedir. İlgili CVE kodları şöyledir.
CVE-2024-58390, CVE-2026-109675, CVE-2026-109674, CVE-2026-109673, CVE-2026-109672, CVE-2026-109671, CVE-2026-109670, CVE-2026-109669, CVE-2026-109668, CVE-2026-109667, CVE-2026-109666, CVE-2026-109665, CVE-2026-109664, CVE-2026-109663, CVE-2026-109662, CVE-2026-109661, CVE-2026-109660, CVE-2026-109659, CVE-2026-109658, CVE-2026-109657, CVE-2026-109656, CVE-2026-109655, CVE-2026-109654, CVE-2026-109653, CVE-2026-109652, CVE-2026-109651, CVE-2026-109650, CVE-2026-109649, CVE-2026-109648, CVE-2026-109647, CVE-2026-109646, CVE-2026-109645, CVE-2026-109644, CVE-2026-109643, CVE-2026-109642, CVE-2026-109641, CVE-2026-109640, CVE-2026-109639, CVE-2026-109638, CVE-2026-109637, CVE-2026-109636, CVE-2026-109635, CVE-2026-109634, CVE-2026-109633, CVE-2026-109632, CVE-2026-109631, CVE-2026-109630, CVE-2026-109629, CVE-2026-109628, CVE-2026-109627, CVE-2026-109626, CVE-2026-109625, CVE-2026-109624, CVE-2026-109623, CVE-2026-109622, CVE-2026-109621, CVE-2026-109617, CVE-2026-109616, CVE-2026-109615, CVE-2026-109614, CVE-2026-109613, CVE-2026-109612, CVE-2026-109611, CVE-2026-109610, CVE-2026-109609, CVE-2026-109608, CVE-2026-109604, CVE-2026-109603, CVE-2025-26240, CVE-2026-109602, CVE-2026-109601, CVE-2026-109600, CVE-2026-109599, CVE-2026-109598, CVE-2025-71432, CVE-2025-71431, CVE-2025-71430, CVE-2024-58391, CVE-2023-54412, CVE-2023-54411, CVE-2023-54410, CVE-2023-54409, CVE-2023-54408, CVE-2023-54407 ve CVE-2023-54406
Çözüm
Siber Güvenlik Başkanlığı, kullanıcı ve sistem yöneticilerine ilgili güvenlik bültenini incelemelerini ve gerekli güncellemelerin ivedilikle yapılmasını tavsiye etmektedir.
Kaynaklar
https://github.com/frappe/frappe/security/advisories
Kaynak: siberguvenlik.gov.tr