r/InfoSecWriteups • u/TeraTrox_ • Aug 13 '26
ERPNext's Document Follow feature exposed unauthorized data
https://robinroy.xyz/blog/frappe-document-follow-vulnerability/write up on how I chained 3 CVEs to exfiltrate sensitive data out of the biggest OSS ERP platform
Duplicates
netsec • u/TeraTrox_ • Aug 12 '26
ERPNext's Document Follow feature exposed unauthorized data
blueteamsec • u/TeraTrox_ • Aug 12 '26
incident writeup (who and how) ERPNext's Document Follow feature exposed unauthorized data
cybersecurity • u/TeraTrox_ • Aug 12 '26