CVE-2023-32669CWE-639
Authorization Bypass on BuddyBoss
Medium · published October 3, 2023
What it is
Authorization bypass vulnerability in BuddyBoss 2.2.9 version, the exploitation of which could allow an authenticated user to access and rename other users' albums. This vulnerability can be exploited by changing the album identification (id).
The record
Technical detail
- CVSS v3.1
- 5.4 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00358 · 28.3th percentile
- Weakness
- CWE-639 · Authorization Bypass Through User-Controlled Key
- Published
- 2023-10-03T12:23Z
EPSS history
Timeline