CVE-2024-4886 The contains an IDOR vulnerability that allows a user to comment on a private post by manipulating the ID included in…

Description

The contains an IDOR vulnerability that allows a user to comment on a private post by manipulating the ID included in the request

Produits et versions touchés

Produit	Versions touchées	Corrigé en
buddyboss-platform 2.6	premières → < 2.6.0	2.6.0

Autres CVE de buddyboss-platform

Les 3 CVE de buddyboss-platform →

CVE-2024-12767 The buddyboss-platform WordPress plugin before 2.7.60 lacks proper access controls and allows a logged-in user to view… 3.5 Faible CVE-2024-4750 The buddyboss-platform WordPress plugin before 2.6.0 contains an IDOR vulnerability that allows a user to like a private… 5.3 Moyenne