CVE-2023-54411

The Frappe framework versions prior to 13.32.0 are vulnerable to weak authentication regarding print view access. The root cause is that the print view key can be derived from data exposed through other whitelisted API endpoints. This allows an attacker to generate a valid key to view documents w...