Frappe HRMS Unauthorized Access to Sensitive HR Records

Executive Summary

Frappe HRMS 16.0.0 before 16.50.0 has missing authorization checks on HR workflow endpoints. This allows any authenticated user, including those with only the Employee role, to access records they are not permitted to view. Specifically, they can read candidate details, employee email addresses, and trigger emails to employees.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your Frappe HRMS version is below 16.50.0. Review HR workflow endpoints for missing authorization checks. Test endpoints manually or with automated tools to see if unauthenticated users can access sensitive records like candidate details or employee emails.

Useful 0 Not Useful 0

Impact Analysis

Unauthorized users can access sensitive HR data like candidate records and employee emails. They may also send emails to employees, potentially leading to phishing or data leaks. The impact includes privacy violations and potential compliance breaches.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability likely violates GDPR due to unauthorized access to personal data and HIPAA if employee health records are exposed. It risks non-compliance with data protection requirements, leading to legal penalties and reputational damage.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately upgrade Frappe HRMS to version 16.50.0 or later to patch the missing authorization checks. If upgrading is not possible, restrict access to HR workflow endpoints and monitor for unauthorized access attempts.

Useful 0 Not Useful 0