Rank0

**Name of the Vulnerable Software and Affected Versions** zrlog version 2.1.0 **Description** The issue concerns a permission check flaw. When an admin account is logged in, unauthorized users can directly download the database backup file. **Recommendations** For zrlog version 2.1.0, consider restricting access to the database backup file until a patch is available. As a temporary workaround, review and strengthen permission checks to prevent unauthorized downloads.