CVE-2020-27508

2020-12-1116:15:12

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.6%

JSON

In two-factor authentication, the system also sending 2fa secret key in response, which enables an intruder to breach the 2fa security.

CPENameOperatorVersion
frappeeq10.1.41
frappeeq4.5.8
frappeeq9.0.8
frappeeq7.2.24
frappeeq7.2.25
frappeeq6.27.2
frappeeq6.27.14
frappeeq12.0.12
frappeeq7.2.14
frappeeq7.1.26

Name	Operator	Version
frappe	eq	10.1.41
frappe	eq	4.5.8
frappe	eq	9.0.8
frappe	eq	7.2.24
frappe	eq	7.2.25
frappe	eq	6.27.2
frappe	eq	6.27.14
frappe	eq	12.0.12
frappe	eq	7.2.14
frappe	eq	7.1.26

Rows per page:

1-10 of 8341

References

github.com/frappe/frappe/pull/11262

github.com/frappe/frappe/pull/11263