Threats tagged 'ghsa-8r3g-54rx-668x'

Frappe HRMS versions before 15.61.0 have a permission bypass vulnerability that allows authenticated employees to access other employees' expense advance details. This occurs due to improper authorization checks in the Expense Claim Advances API, enabling unauthorized data exposure of sensitive financial information.