Frappe Press 2FA Bypass Vulnerability

A vulnerability in the Frappe custom app 'Press', which operates on Frappe Cloud, allows users to bypass two-factor authentication (2FA) during login. This issue arises from insufficient server-side validation of 2FA, enabling unauthorized access. The vulnerability affects versions of the app prior to the commit ddb439f8eb1816010f2ef653a908648b71f9bba8.

Impact

Exploitation of this vulnerability allows users to bypass 2FA login requirements, potentially leading to unauthorized access to user accounts.

Remediation

Users can update to the version that includes the patch for this vulnerability, available in the commit ddb439f8eb1816010f2ef653a908648b71f9bba8.