CVE-2025-67289 | Frappe Framework 15.89.0 Attachments unrestricted upload

A vulnerability, which was classified as critical, was found in Frappe Framework 15.89.0. Affected by this vulnerability is an unknown functionality of the component Attachments Module. Such manipulation leads to unrestricted upload.

This vulnerability is documented as CVE-2025-67289. The attack can be executed remotely. There is not any exploit available.