ERPNext Document Follow Feature Vulnerability Exposed Unauthorized Data

The post describes a security issue where three CVEs were chained together to exfiltrate sensitive data from ERPNext. The vulnerability specifically involved the Document Follow feature, which allowed unauthorized access to information.