Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r73q-v29w-vr75

Опубликовано: 03 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Authorization bypass vulnerability in BuddyBoss 2.2.9 version, the exploitation of which could allow an authenticated user to access and rename other users' albums. This vulnerability can be exploited by changing the album identification (id).

Authorization bypass vulnerability in BuddyBoss 2.2.9 version, the exploitation of which could allow an authenticated user to access and rename other users' albums. This vulnerability can be exploited by changing the album identification (id).

EPSS

Процентиль: 14%
0.00046
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-639

Связанные уязвимости

CVSS3: 5.4
nvd
больше 2 лет назад

Authorization bypass vulnerability in BuddyBoss 2.2.9 version, the exploitation of which could allow an authenticated user to access and rename other users' albums. This vulnerability can be exploited by changing the album identification (id).

EPSS

Процентиль: 14%
0.00046
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-639