Advisories · Technology
frappe press.
Every CVE that names frappe press among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 1.3 Low
Press vulnerable to reflected XSS on login redirection
- frappe press
- Cross-site scripting (XSS)
- CVSS 6.6 Medium
Frappe Press has an unsafe HTTP method / CSRF-adjacent issue on API secret generation
- frappe press
- Cross-site request forgery (CSRF)
- CVSS 2.7 Low
Press vulnerable to email flooding to users due to lack of validation and rate limits
- frappe press
- Denial of service
- CVSS 6.9 Medium
Press has a potential 2FA bypass
- frappe press
- Authentication bypass
- CVSS 0.0 None
Press has a potential 2FA bypass
- frappe press
- CWE-640
- CVSS 1.2 Low
Frappe Press possible HTML injection through SaaS Signup inputs
- frappe press
- Cross-site scripting (XSS)