CVE-2019-20529

In core/doctype/prepared_report/prepared_report.py in Frappe 11 and 12, data files generated with Prepared Report were being stored as public files (no…

published March 18, 2020

CVSS
—
EPSS
1%
Percentile
70.8
In the wild
Unconfirmed
What it is

In core/doctype/prepared_report/prepared_report.py in Frappe 11 and 12, data files generated with Prepared Report were being stored as public files (no authentication is required to access; having a link is sufficient) instead of private files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01329 · 70.8th percentile
Published
2020-03-18T17:30Z
EPSS history
Timeline
  • 18 MAR 17:30Z
    In core/doctype/prepared_report/prepared_report.py in Frappe 11 and 12, data files generated with Prepared Report were being stored as public files (no…
    cvelistv5