← All advisories

High severity7.5NVD Advisory· Published Dec 11, 2020· Updated Jun 17, 2026

CVE-2020-27508

CVE-2020-27508

Description

In two-factor authentication, the system also sending 2fa secret key in response, which enables an intruder to breach the 2fa security.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Frappe/Frappe2 versions
cpe:2.3:a:frappe:frappe:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:frappe:frappe:*:*:*:*:*:*:*:*range: <12.10.0
- (no CPE)

Patches

Vulnerability mechanics

References

2

github.com/frappe/frappe/pull/11262nvdPatchThird Party Advisory
github.com/frappe/frappe/pull/11263nvdPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.