Frappe HR Improper Access Control Vulnerability Allowing Unauthorized File Access
Vulnerability
An improper access control vulnerability has been identified in Frappe HR versions prior to 15.58.2 and 16.4.2. This vulnerability allows authenticated users to access unauthorized files by exploiting certain API endpoints. The issue has been patched in versions 15.58.2 and 16.4.2.
Impact
Exploitation of this vulnerability allows authenticated users to access unauthorized files, potentially leading to unauthorized information disclosure.
Remediation
Users are advised to upgrade to Frappe HR versions 15.58.2 or 16.4.2, where this vulnerability has been patched.
Added: Apr 21, 2026, 11:45 PM
Updated: Apr 21, 2026, 11:45 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
5.2remediation
0.0relevance
6.4threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.