Skjbulcher

**Name of the Vulnerable Software and Affected Versions** Frappe ERPNext versions prior to 15.112.0 **Description** Authenticated users with a common operational role can modify records beyond their assigned permissions. This occurs due to missing validation in certain endpoints, allowing attackers to change fields on record types they should not control, resulting in data tampering. **Recommendations** Update to version 15.112.0 or later.