CVE-2020-19005: Zrlog

Medium severity, CVSS 5.7. EPSS: 0.7% chance of exploitation in the next 30 days.

zrlog v2.1.0 has a vulnerability with the permission check. If admin account is logged in, other unauthorized users can download the database backup file directly.

Affected products

• Zrlog Zrlog: version 2.1.0 only

Published 2020-08-25. Last modified 2026-06-17.