CVE-2025-62407
Frappe has an Open Redirect on Login Page
Résumé
Frappe has an Open Redirect on Login Page
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Frappe is a full-stack web application framework. Prior to 14.98.0 and 15.83.0, an open redirect was possible through the redirect argument on the login page, if a specific type of URL was passed in. This vulnerability is fixed in 14.98.0 and 15.83.0.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov