Zyx122126

**Name of the Vulnerable Software and Affected Versions** NotionNext versions 4.1.0 through 4.10.10 **Description** An issue exists in the Authentication Guard component within the `cleanCache()` function of the `pages/api/cache.js` file. Remote manipulation of the `token` argument can lead to a complete bypass of authentication. In versions 4.1.0 through 4.9.5.2, the flaw is caused by a missing method check. In versions 4.9.5.7 through 4.10.10, a guard is present but is only enforced if the `CACHE REVALIDATION TOKEN` variable is configured, leaving default deployments unprotected. **Recommendations** For versions 4.1.0 through 4.10.10, set the `CACHE REVALIDATION TOKEN` variable to ensure the authentication guard is enforced. As a temporary mitigation, restrict access to the `pages/api/cache.js` endpoint.

**Name of the Vulnerable Software and Affected Versions** Frappe HR versions prior to 16.15.0 **Description** An incorrect authorization issue exists within the Permission Validation component. The flaw allows remote exploitation by manipulating the `employee` argument in the `get expense claims()`, `get shift requests()`, and `get attendance requests()` functions located in the `hrms/api/ init .py` file. **Recommendations** Update Frappe HR to version 16.15.0 or later. As a temporary mitigation, restrict access to the `get expense claims()`, `get shift requests()`, and `get attendance requests()` functions.