CVE-2019-20529
In core/doctype/prepared_report/prepared_report.py in Frappe 11 and 12, data files generated with Prepared Report were being stored as public files (no authentication is require…
Published: 2020-03-18 · CVSS: Unscored
In core/doctype/prepared_report/prepared_report.py in Frappe 11 and 12, data files generated with Prepared Report were being stored as public files (no authentication is required to access; having a link is sufficient) instead of private files.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7