CyberRota Analysis
AI-GeneratedThe Frappe web application framework is vulnerable due to inadequate restrictions in its OAuth2 consent flow, allowing attackers to exploit the approve and authorize functions without proper validation. This can lead to unauthorized data access and actions by enabling an authenticated user to approve OAuth grants for malicious clients. Organizations using versions prior to 15.114.0 and 16.26.0 should prioritize patching to mitigate the risk of credential misuse and data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Frappe is a full-stack web application framework. Prior to 15.114.0 and 16.26.0, the approve and authorize functions in frappe/integrations/oauth2.py allow the OAuth2 consent flow to proceed without restricting approve to POST, without a csrf_token in frappe/templates/includes/oauth_confirmation.html, and without scoping an active OAuth token check to the requesting client. An attacker can cause an authenticated user to approve an OAuth grant or reuse authorization state for the wrong client, exposing data and permitting actions within the granted scopes. This issue is fixed in versions 15.114.0 and 16.26.0.