CVE-2025-62407 — Frappe has an Open Redirect on Login Page
Frappe is a full-stack web application framework. Prior to 14.98.0 and 15.83.0, an open redirect was possible through the redirect argument on the login page, if a specific typ…
Published: 2025-10-16 · CVSS: 6.1 · CVSS 3.1
Frappe is a full-stack web application framework. Prior to 14.98.0 and 15.83.0, an open redirect was possible through the redirect argument on the login page, if a specific type of URL was passed in. This vulnerability is fixed in 14.98.0 and 15.83.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7