Medium severity5.7NVD Advisory· Published Aug 25, 2020· Updated Jun 17, 2026
CVE-2020-19005
CVE-2020-19005
Description
zrlog v2.1.0 has a vulnerability with the permission check. If admin account is logged in, other unauthorized users can download the database backup file directly.
Affected products
2- zrlog/zrlogdescription
Patches
Vulnerability mechanics
References
2- github.com/94fzb/zrlog/commit/b2b4415e2e59b6f18b0a62b633e71c96d63c43banvdPatchThird Party Advisory
- github.com/94fzb/zrlog/issues/48nvdIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.