zrlog v2.1.0 has a vulnerability with the permission check. If admin account is logged in, other unauthorized users can download the database backup file directly.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19005
Reference (s):
- https://github.com/94fzb/zrlog/commit/b2b4415e2e59b6f18b0a62b633e71c96d63c43ba
- https://github.com/94fzb/zrlog/issues/48