Frappe Press Email Flooding Vulnerability
Vulnerability
A vulnerability in the Frappe Press custom application, which manages various aspects of Frappe Cloud, has been identified. This issue allows a bad actor to flood a user's inbox by repeatedly sending duplicate invites. The vulnerability arises from a lack of proper validation and rate limits on the invitation system, enabling the abuse of invite functionality to disrupt user experience.
Impact
Exploitation of this vulnerability can lead to email flooding, causing disruption and inconvenience to users by overwhelming their inboxes with repeated invitation requests.
Remediation
Users can update to version 83c3fc7676c5dbbe1fd5092d21d95a10c7b48615 to address this vulnerability.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.