CVE Intelligence

Frappe Frappe vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Frappe Frappe: 76 record(s), with affected versions and fixes.
cpe:2.3:a:frappe:frappe

CVE-2025-62407 Medium · 6.1 CWE-601 Oct 16, 2025
Frappe has an Open Redirect on Login Page
Frappe is a full-stack web application framework. Prior to 14.98.0 and 15.83.0, an open redirect was possible through the redirect argument on the login page, if a specific type of URL was passed in. This vulnerability is fixed in 14.98.0 and 15.83.0.