Threats tagged 'ghsa-xfwp-rff6-r369'

Frappe india-payroll versions before 16.0.4 have a missing authorization vulnerability in specific methods of tax_regime_selector.py. This flaw allows authenticated users with low privileges to access payroll data of other employees and modify tax regimes on draft salary assignments. The vulnerability affects confidentiality and integrity of payroll data.