CVE-2023-54411
Frappe before 13.32.0 Weak Authentication via Print View Key
CVSS Score
5.9
EPSS Score
0.0%
EPSS Percentile
0th
Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. Attackers can generate a valid key to view documents through the print view without proper permissions.
| CWE | CWE-290 |
| Vendor | frappe |
| Product | frappe |
| Published | Oct 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for frappe frappe
Be the first to know when new medium vulnerabilities affecting frappe frappe are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
frappe / frappe
0 < 13.32.0
References
Credits
sagarvora