What is GHSA-5xf7-rghr-q4f2?

GHSA-5xf7-rghr-q4f2 is a security advisory published by GitHub Security Advisories with High severity. Frappe framework before 13.32.0 uses weak authentication for print view access, because the print...

Which CVE IDs does GHSA-5xf7-rghr-q4f2 cover?

GHSA-5xf7-rghr-q4f2 covers the following CVE IDs: CVE-2023-54411. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5xf7-rghr-q4f2?

GHSA-5xf7-rghr-q4f2 has a CVSS v3 base score of 5.9, published by GitHub Security Advisories.

GHSA-5xf7-rghr-q4f2HighCVSS 5.9

Frappe framework before 13.32.0 uses weak authentication for print view access, because the print...

Vendor

GitHub Security Advisories

Published

October 13, 2026

Last Modified

October 13, 2026

🔗 CVE IDs covered (1)

CVE-2023-54411 →

📋 Description

Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. Attackers can generate a valid key to view documents through the print view without proper permissions.

🔗 References (4)

https://github.com/frappe/frappe/security/advisories/GHSA-7xv4-ggpj-g48q
https://nvd.nist.gov/vuln/detail/CVE-2023-54411
https://www.vulncheck.com/advisories/frappe-before-13.32.0-weak-authentication-via-print-view-key
https://github.com/advisories/GHSA-5xf7-rghr-q4f2