Medium severity5.7NVD Advisory· Published Aug 25, 2020· Updated Jun 17, 2026

CVE-2020-19005

Description

zrlog v2.1.0 has a vulnerability with the permission check. If admin account is logged in, other unauthorized users can download the database backup file directly.

Affected products

zrlog/zrlogdescription
ZrLog/ZrLog2 versions
cpe:2.3:a:zrlog:zrlog:2.1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:zrlog:zrlog:2.1.0:*:*:*:*:*:*:*
- (no CPE)range: <=2.1.0

Patches

Vulnerability mechanics

References

github.com/94fzb/zrlog/commit/b2b4415e2e59b6f18b0a62b633e71c96d63c43banvdPatchThird Party Advisory
github.com/94fzb/zrlog/issues/48nvdIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.371
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000