CVE-2026-29077 - Frappe: Broken Access Control in DocShare

CVE ID : CVE-2026-29077 Published : March 5, 2026, 9:16 p.m. | 27 minutes ago Description : Frappe is a full-stack web application framework. Prior to versions 15.98.0 and 14.100.0, due to a lack of validation when sharing documents, a user could share a document with a permission that they themselves didn't have. This issue has been patched in versions 15.98.0 and 14.100.0. Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...