Skip to content
OpenAdvisories

Product · Frappe Technologies

press

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.6
    CVE-2026-41317

    Frappe Press has an unsafe HTTP method / CSRF-adjacent issue on API secret generation

    Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS).`press.api.account.create_api_secret` is prone to CSRF-like exploits. This endpoint writes to database and it is also access…

    Frappe Technologies press
  • Medium 6.9
    CVE-2025-53545

    Press has a potential 2FA bypass

    Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS). Users can circumvent 2FA login for users due to a lack of server side validation for the same. This vulnerability is fixed …

    Frappe Technologies press