https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T14:10:03.459534+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-34074 CVE-2024-34074 — Frappe vuilnerable to an open redirect on login page 2026-10-14T14:10:03.460659+00:00

Affected: frappe

Frappe is a full-stack web application framework. Prior to 15.26.0 and 14.74.0, the login page accepts redirect argument and it allowed redirect to untrusted external URls. This behaviour can be used by malicious actors for phishing. This vulnerability is fixed in 15.26.0 and 14.74.0.