Skip to content
Sign in
4.3 Medium

CVE-2024-4886 The contains an IDOR vulnerability that allows a user to comment on a private post by manipulating the ID included in…

Description

The contains an IDOR vulnerability that allows a user to comment on a private post by manipulating the ID included in the request

Affected products and versions

Product Affected versions Fixed in
buddyboss-platform 2.6 earliest → < 2.6.0 2.6.0

Other CVEs of buddyboss-platform

The 3 CVEs of buddyboss-platform →
CVE-2024-12767 The buddyboss-platform WordPress plugin before 2.7.60 lacks proper access controls and allows a logged-in user to view… 3.5 Low CVE-2024-4750 The buddyboss-platform WordPress plugin before 2.6.0 contains an IDOR vulnerability that allows a user to like a private… 5.3 Medium
Track this CVE