EUVD-2023-60716

Frappe before 13.22.0 contains an improper authorization vulnerability that allows authenticated users to rename documents by exploiting a missing permission check. Attackers can invoke the document rename functionality on documents they lack permission to modify, altering records without proper...

CVE-2023-54410

The Frappe framework, in versions before 13.22.0 , is susceptible to an improper authorization vulnerability (CWE-285) caused by a missing permission check during document renaming. This flaw allows authenticated users to rename documents they do not have permission to modify, potentially leading...