Unrated

zrlog v2.1.0 has a vulnerability with the permission check. If admin account is logged in, other unauthorized users can download the database backup f...

CVE-2020-19005 First seen on SecPulse Aug 26, 2020

Original description The description as published by the source.

zrlog v2.1.0 has a vulnerability with the permission check. If admin account is logged in, other unauthorized users can download the database backup file directly.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

patch github.com
report github.com

Key facts

Severity: Unrated
Published: Aug 26, 2020
First seen on SecPulse: Aug 26, 2020

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:52