Executive Summary

This vulnerability is an open redirect issue in the Frappe web application framework. Before versions 14.98.0 and 15.83.0, an attacker could exploit the redirect argument on the login page by passing a specific type of URL, causing the application to redirect users to potentially malicious sites. This could be used to trick users into visiting harmful websites.

Useful 0 Not Useful 0

Impact Analysis

The open redirect vulnerability can lead to users being redirected to malicious websites, which may result in phishing attacks, credential theft, or other social engineering exploits. It can undermine user trust and potentially expose users to further security risks.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade Frappe to version 14.98.0 or later, or 15.83.0 or later, where the open redirect vulnerability has been fixed.

Useful 0 Not Useful 0