Frappe Open Redirect and XSS Vulnerability in Signup Process

A vulnerability allowing open redirect or reflected cross-site scripting (XSS) has been identified in the Frappe web application framework, specifically in versions prior to 14.99.14 and 15.94.0. The issue arises when an attacker crafts a malicious signup URL that, upon user registration, redirects to an external site or executes a script, depending on the payload used.

Impact

Exploitation of this vulnerability could result in an open redirect or reflected cross-site scripting, allowing for the potential execution of malicious scripts in the context of the user's browser.

Reproduction

To reproduce this vulnerability, create a signup URL that includes a crafted redirect payload. When a user signs up using this URL, the application will either redirect to the specified location or execute a script, depending on the payload.

Remediation

Users are advised to upgrade to Frappe versions 14.99.14 or 15.94.0, where this vulnerability has been patched.