medium5.7
CVE-2020-19005
zrlog v2.1.0 has a vulnerability with the permission check.
Impact
zrlog v2.1.0 has a vulnerability with the permission check. If admin account is logged in, other unauthorized users can download the database backup file directly.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zrlog | Zrlog | Version 2.1.0 |