Threats tagged 'ghsa-c5rf-74mx-pffw'

ERPNext OCR app for Frappe/ERPNext versions through 1.1.1 contains a vulnerability involving missing authorization and path traversal. This flaw allows any authenticated user to read arbitrary files on the server by providing a client-controlled path argument to the read_document method. Exploitation can bypass the File doctype permission model, exposing private user uploads and enabling server-side requests to internal services and cloud metadata endpoints.