VULNERABILITY INTELLIGENCE
CVE-2025-59421
EPSS probability0.44%
CISA KEVNot currently listed
Published2025-09-18
Last modified2026-06-17
Description
Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS). A bad actor can flood the inbox of a user by repeatedly sending invites (duplicate). The issue is fixed in commit 83c3fc7676c5dbbe1fd5092d21d95a10c7b48615.
Weakness classification
- security-advisories@github.com: CWE-770