Medium severity5.9NVD Advisory· Published Oct 12, 2026· Updated Oct 12, 2026

CVE-2023-54411

Description

Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. Attackers can generate a valid key to view documents through the print view without proper permissions.

Affected products

Frappe/Frappellm-fuzzy
Range: <13.32.0

Patches

Vulnerability mechanics

References

github.com/frappe/frappe/security/advisories/GHSA-7xv4-ggpj-g48qnvd
www.vulncheck.com/advisories/frappe-before-13.32.0-weak-authentication-via-print-view-keynvd

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000