Executive brief
Frappe is a web application framework used to build business software and ERPs. A vulnerability in the workflow approval endpoint allows an attacker to trick an authenticated user into approving workflow actions (such as document submissions or cancellations) without their knowledge. This could lead to unauthorized business process changes or data modifications performed under the victim's account.
Technical details
The vulnerability is a Cross-Site Request Forgery (CSRF) flaw in the frappe.model.workflow.bulk_workflow_approval endpoint (frappe/model/workflow.py). The endpoint accepts HTTP GET requests (and other safe methods) for state-changing workflow approvals instead of restricting to POST, allowing an attacker to embed malicious links or images in web pages that trigger approval actions when visited by an authenticated Frappe user. An attacker must have knowledge of target document IDs and workflow states, and the victim must be logged in to Frappe. The fix, merged in July 2026, enforces POST-only access to these endpoints. No released patch version was available at the time of advisory publication.
Affected products
- Frappe Frappe 16.31.0 and earlier
Timeline
- 2026-08-20: disclosed
- 2026-07-30: patched: Fix merged to develop branch; no released version available at advisory date