1 result · Clear filters · Feed
-
Medium 6.9
Authentication bypass in multiple products from Frappe Technologies
A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext authentication process, which allows multiple email addresses to be accepted by manipulating the email field in the /api/method/press.api.account.signup endpoint…